← Database

CVE-2025-0613

MEDIUM CVSS: 6.1 Published: 2025-03-31 Modified: 2026-06-17

Description

The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed

Affected Platforms

10Web Photo Gallery

Weakness Type

CWE-79

References