CVE-2021-25041

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting XSS issues via the bwgalbumbreadcrumb0 and shortcodeid GET parameters passed to the bwgfrontenddata AJAX action...

CVE-2021-31693

The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via albumgalleryid0, bwgalbumsearch0, and type0 for bwgfrontenddata. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-46889. NOTE: VMware information, previously connected to this CVE ID becau...

CVE-2021-31693

The WordPress plugin WordPress Photo Gallery by 10Web (before version 1.5.69) is affected by CVE-2021-31693 and related CVEs. Concrete details from connected documents show multiple reflected cross-site scripting vulnerabilities via GET parameters gallery_id, tag, album_id, and theme_id passed to...

CVE-2021-25041

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting XSS issues via the bwgalbumbreadcrumb0 and shortcodeid GET parameters passed to the bwgfrontenddata AJAX action...

CVE-2021-25041

The CVE-2021-25041 entry concerns the Photo Gallery by 10Web WordPress plugin and its vulnerability to Reflected Cross-Site Scripting (XSS) in WordPress. Affected component is the bwg_frontend_data AJAX action, with exploitation via GET parameters bwg_album_breadcrumb_0 and shortcode_id passed to...

CVE-2021-25041 Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting XSS issues via the bwgalbumbreadcrumb0 and shortcodeid GET parameters passed to the bwgfrontenddata AJAX action...