This vulnerability (CVE-2024-35628) in Photo Gallery by 10Web is classified as CWE-862 (Missing Authorization). It affects versions up to 1.8.25 and allows users with limited privileges to bypass authorization controls, potentially enabling unauthorized modification of data. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with low integrity impact.

The impact is limited to unauthorized modification of data within the affected plugin due to missing authorization checks. There is no confidentiality or availability impact reported. The vulnerability requires an attacker to have some level of privileges on the system, and no user interaction is needed to exploit it. No known exploits are currently reported in the wild.

No official patch or remediation is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory or vendor communications for current remediation guidance. Until a fix is released, restrict user privileges to the minimum necessary and monitor for any suspicious activity related to the plugin.