CVE-2021-25041

Publication date

2021-12-06 15:55:40

Family

WPScan

State

PUBLISHED

Description

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action