CVE-2023-1427: fallo de gravedad media en Photo Gallery by 10Web
Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.9epss 0.8%
- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Productos afectados
Unknown · Photo Gallery by 10WebCVEs relacionadas — Photo Gallery by 10Web
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-24139—Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionEPSS 5.5%CVE-2024-10704MEDIUMPhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSSEPSS 0.4%CVE-2024-5968MEDIUMPhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSEPSS 0.4%CVE-2024-8670MEDIUMPhoto Gallery by 10Web < 1.8.29 - Admin+ Stored XSSEPSS 0.4%CVE-2025-0613MEDIUMPhoto Gallery < 1.8.34 - Unauthenticated Stored XSSEPSS 0.3%CVE-2026-12865HIGHPhoto Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged ParametersEPSS 0.3%