Threats tagged 'ghsa-3cr3-2f7q-j6j2'

The Photo Gallery by 10Web WordPress plugin versions before 1.8.49 contains a vulnerability where a shortcode attribute that sets a gallery watermark image is not properly escaped before rendering into an HTML image attribute. This flaw allows users with Contributor-level access and above to perform Stored Cross-Site Scripting (XSS) attacks that execute in the browsers of any users viewing the published gallery, including administrators.