7.1 High

CVE-2024-32583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21.

Affected products and versions

Product	Affected versions	Fixed in
Photo Gallery by 10Web 1.8	earliest → 1.8.21	No fix stated
photo_gallery	Versions not published

The 4 CVEs of Photo Gallery by 10Web →

CVE-2023-33995 Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly… 4.3 Medium CVE-2024-35628 Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by… 4.3 Medium CVE-2024-33586 Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by… 5.3 Medium

Do you use Photo Gallery by 10Web?

Track this CVE Watch Photo Gallery by 10Web Check my SBOMs

www.cveye.io/en/cve/CVE-2024-32583

Timeline

Published April 18, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-32583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team…

Description

Affected products and versions

Other CVEs of Photo Gallery by 10Web