CVE-2025-0613 — Photo Gallery < 1.8.34 - Unauthenticated Stored XSS

CVE-2025-0613

Photo Gallery < 1.8.34 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed

Affected (CNA)

Vendor / product	Versions
Unknown / Photo Gallery by 10Web	affected 0 before 1.8.34

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/22be2b44-cd42-4b02-8448-59dd2989dde1/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.