Aller au contenu

Vulnérabilités de 10web photo_gallery

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-32583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team… 7.1 Élevée 18 avr. 2024
CVE-2024-29833 The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by… 5.4 Moyenne 26 mars 2024
CVE-2024-29810 The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… 5.4 Moyenne 26 mars 2024
CVE-2024-29809 The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… 5.4 Moyenne 26 mars 2024
CVE-2024-29808 The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross… 5.4 Moyenne 26 mars 2024
CVE-2024-29832 The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross… 6.1 Moyenne 26 mars 2024
CVE-2024-0221 The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal… 9.1 Critique 5 févr. 2024

Autres produits 10web