CVE-2023-1427

Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal

Medium · published April 17, 2023

CVSS v3.1
4.9
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00783 · 55.5th percentile
Published
2023-04-17T12:17Z
EPSS history
Timeline
  • 17 APR 12:17Z
    Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
    cvelistv5