10web Photogallery
5 CVEs affecting 10web Photogallery. Latest disclosed: 2024-03-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-29832 | Medium | 6.1 | 2024-03-26 | The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the current… |
CVE-2024-29833 | Medium | 5.4 | 2024-03-26 | The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by using a Cross Site Scripting payload which… |
CVE-2024-29810 | Medium | 5.4 | 2024-03-26 | The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the thumb_… |
CVE-2024-29809 | Medium | 5.4 | 2024-03-26 | The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the image_… |
CVE-2024-29808 | Medium | 5.4 | 2024-03-26 | The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the image_i… |