CVE-2019-16117

CVE-2019-16117 affects the WordPress plugin Photo Gallery by 10Web, with XSS in the gallery title parsed via admin/models/Galleries.php. Affected versions are prior to 1.5.35. Root cause: insufficient sanitization/escaping of gallery title, enabling stored XSS that can trigger when listing or vie...

CVE-2019-16117

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php...

CVE-2019-16117

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php...

CVE-2019-16118

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

CVE-2019-16118

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

CVE-2019-16118

CVE-2019-16118 affects the WordPress Photo Gallery (10Web Photo Gallery) plugin prior to 1.5.35. The issue is a Cross-Site Scripting (XSS) vulnerability exposed via admin/controllers/Options.php, caused by unvalidated/unescaped data. Impact per sources: attacker could execute script in victim’s b...

CVE-2019-16119

SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...

CVE-2019-16119

The CVE concerns the WordPress Photo Gallery by 10Web plugin. A SQL injection vulnerability exists in versions prior to 1.5.35, exploitable via the album_id parameter in admin/controllers/Albumsgalleries.php, allowing potential unauthorized database access or modification. Public writeups rate th...

CVE-2019-16119

SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...

Photo Gallery by 10Web < 1.5.35 - SQL Injection & XSS

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by a SQL Injection & XSS security vulnerability...

CVE-2019-16117: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php...

CVE-2019-16118: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...

CVE-2019-16119: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...

Cross site scripting

The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...

CVE-2019-14797

The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...

CVE-2019-14797

The CVE-2019-14797 entry concerns the WordPress plugin Photo Gallery by 10Web (WordPress, prior to version 1.5.23). The vulnerability is an authenticated stored XSS in the plugin, as stated across multiple connected sources. In practical terms, an authenticated attacker could inject malicious scr...

CVE-2019-14798

The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcodebwg tagtext parameter...

CVE-2019-14798

The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcodebwg tagtext parameter...

CVE-2019-14798

The CVE-2019-14798 case concerns the WordPress plugin Photo Gallery by 10Web (before 1.5.25). Affected component: wp-admin/admin-ajax.php handling of action=shortcode_bwg with the tagtext parameter. Root cause: Authenticated Local File Inclusion via directory traversal, enabling access to files o...

PT-2019-13842

Name of the Vulnerable Software and Affected Versions 10Web Photo Gallery plugin versions prior to 1.5.23 Description The issue is related to an authenticated stored XSS. Recommendations For versions prior to 1.5.23, update to version 1.5.23 or later to resolve the issue...