CVE-2019-14798

Publication date

2019-08-09 13:29:40

Family

mitre

State

PUBLISHED

Description

The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter.