CVE-2021-31693

The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data

published November 29, 2022

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-46889. NOTE: VMware information, previously connected to this CVE ID because of a typo, is at CVE-2022-31693.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.6th percentile
Published
2022-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data
    cvelistv5