CVE-2019-16117 - Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php

MEDIUM

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php

Published Sep 8, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 4.61%

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://packetstormsecurity.com/files/154433/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6958		Advisory
https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/admin/models/Galleries.php?old=2135029&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fmodels%2FGalleries.php		x_refsource_MISCPatch
https://wordpress.org/plugins/photo-gallery/#developers		x_refsource_MISCProduct
https://wpvulndb.com/vulnerabilities/9872		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 8, 2019

Updated Aug 5, 2024

Reserved Sep 8, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 8, 2019

Updated Aug 5, 2024

GitHub

No data