CVE-2025-0613 — Photo Gallery < 1.8.34 - Unauthenticated Stored XSS
The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-…
Published: 2025-03-31 · CVSS: 6.1 · CVSS 3.1
The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7