Security Advisory

CVE-2021-25041

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-06 15:55:40
Last updated 2024-08-03 19:49:14
Assigner WPScan
State PUBLISHED

Description

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action