CVE-2025-0613

Photo Gallery < 1.8.34 - Unauthenticated Stored XSS

Medium · published March 31, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.1th percentile
Published
2025-03-31T06:00Z
EPSS history
Timeline
  • 31 MAR 06:00Z
    Photo Gallery < 1.8.34 - Unauthenticated Stored XSS
    cvelistv5