Approved changes feed: RSS · Atom

cpe:2.3:a:photo_gallery_team:photo_gallery_by_10web_–_mobile-friendly_image_gallery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhoto Gallery Team (bcd4662e-16db-5a4b-a516-11edeb13c5aa)
ProductPhoto Gallery By 10Web – Mobile Friendly Image Gallery (89f56d86-b292-539d-b1da-7e73ef4ad856)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24291 vulnerable 2026-06-08 05:30:04.127523 Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users)
Published: 2021-05-14T11:38:18.000Z
Updated: 2024-08-03T19:28:23.495Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.