CVE-2026-42715 Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

Affected products and versions

Product	Affected versions	Fixed in
Photo Gallery by 10Web 1.8	earliest → 1.8.47	No fix stated

Other CVEs of Photo Gallery by 10Web

The 6 CVEs of Photo Gallery by 10Web →

CVE-2026-102377 Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions 8.8 High CVE-2026-49771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo… 7.6 High CVE-2026-32330 Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site… 4.3 Medium CVE-2026-27360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo… 5.9 Medium