Skip to content

Known vulnerabilities in 10web PhotoGallery

Is your version affected?

CVE Summary Score Published
CVE-2024-29833 The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by… 5.4 Medium Mar 26, 2024
CVE-2024-29810 The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… 5.4 Medium Mar 26, 2024
CVE-2024-29809 The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… 5.4 Medium Mar 26, 2024
CVE-2024-29808 The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross… 5.4 Medium Mar 26, 2024
CVE-2024-29832 The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross… 6.1 Medium Mar 26, 2024

Other 10web products