CVE-2019-14797

The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...

CVE-2019-14797

The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...

CVE-2019-14797

The CVE-2019-14797 entry concerns the WordPress plugin Photo Gallery by 10Web (WordPress, prior to version 1.5.23). The vulnerability is an authenticated stored XSS in the plugin, as stated across multiple connected sources. In practical terms, an authenticated attacker could inject malicious scr...