Vulnerabilities > CVE-2022-1281 - Unspecified vulnerability in 10Web Photo Gallery

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
10web
critical
NVD
Published: 2022-05-02
Updated: 2024-11-21

Summary

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.

Vulnerable Configurations

Part Description Count
Application
10Web
324

References