CVE-2024-8670

CVE-2024-8670 affects the Photo Gallery by 10Web WordPress plugin prior to 1.8.29. The vulnerability stems from incomplete sanitization/escaping of plugin settings, enabling Stored XSS by high-privilege admins even when unfiltered_html is disallowed (e.g., multisite). Exploitation context: authen...