CVE-2021-25041CWE-79

Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)

published December 6, 2021

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00909 · 59.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-12-06T15:55Z
EPSS history
Timeline
  • 06 DEC 15:55Z
    Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)
    cvelistv5