CVE-2021-24363
Photo Gallery < 1.5.75 - File Upload Path Traversal
MEDIUM 4.9EPSS 1.9%
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images/SVG anywhere in the filesystem via a path traversal vector
- Affected
- Photo Gallery by 10Web – Mobile-Friendly Image Gallery
- CVSS v3.1 NVD
- 4.9 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N - EPSS
- 1.89% chance of exploitation in the next 30 days, 79th percentile
- Published
- 2021-08-16
- Updated
- 2024-08-03