CVE-2019-16118

概要

参考情報

• packetstormsecurity.com/files/154433/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html · Third Party Advisory
• plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/admin/controllers/Options.php · Patch
• plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/js/bwg.js · Patch
• wordpress.org/plugins/photo-gallery · Product
• wpvulndb.com/vulnerabilities/9872 · Third Party Advisory

photo gallery のその他の脆弱性

• CVE-2024-8670中 4.8The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings, which could allow high privile…
• CVE-2025-0613中 6.1The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, …
• CVE-2024-13124低 3.5The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privile…
• CVE-2023-33995中 4.3Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Sec…
• CVE-2024-10704中 4.8The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privile…