8.8
High
CVE-2026-118081 Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions
Description
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 10Web Social Photo Feed 1.5 | earliest → 1.5.6 | No fix stated |