CVE-2025-0613

Published: 2025-03-31T06:15Z

Last Modified: 2025-03-31T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed > MITRE Terms of Use apply – see LICENSE‑MITRE.txt