CVE-2024-8670

The Photo Gallery by 10Web WordPress plugin (versions prior to 1.8.29 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitize and escape certain settings, allowing high-privilege users, such as administrators, to execute malicious scrip...