CVE-2020-9335

Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress

published February 25, 2020

CVSS
—
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01355 · 71.4th percentile
Published
2020-02-25T16:35Z
EPSS history
Timeline
  • 25 FEB 16:35Z
    Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress
    cvelistv5