https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:30:13.605341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1394 CVE-2022-1394 — Photo Gallery < 1.6.4 - Admin+ Stored Cross-Site Scripting 2026-10-07T16:30:13.620065+00:00

Affected: Unknown Photo Gallery by 10Web – Mobile-Friendly Image Gallery

The Photo Gallery by 10Web WordPress plugin before 1.6.4 does not properly validate and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed