CVE-2023-1427
Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.9EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Apr 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Unknown · Photo Gallery by 10WebWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →