<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: photo-gallery-by-10web-mobile-friendly-image-gallery</title><description>Every new CVE for photo-gallery-by-10web-mobile-friendly-image-gallery.</description><link>https://agentprime.io/</link><item><title>CVE-2026-18557: Photo Gallery by 10Web &lt;= 1.8.42 - Reflected Cross-Site Scripting via &apos;title&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-18557/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18557/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 05:30:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-92974: Photo Gallery by 10Web &lt;= 1.8.46 - Reflected Cross-Site Scripting via &apos;thumb_url&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-92974/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92974/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 06:38:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85652: Photo Gallery by 10Web &lt;= 1.8.44 - Authenticated (Author+) SQL Injection via &apos;album_id&apos; Shortcode Attribute</title><link>https://agentprime.io/advisories/CVE-2026-85652/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85652/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 07:40:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86311: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes</title><link>https://agentprime.io/advisories/CVE-2026-86311/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86311/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 03:39:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-9829: Photo Gallery by 10Web &lt;= 1.8.41 - Authenticated (Contributor+) SQL Injection via &apos;compact_album_order_by&apos; Shortcode Parameter</title><link>https://agentprime.io/advisories/CVE-2026-9829/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9829/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Jun 2026 04:28:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7048: Photo Gallery by 10Web &lt;= 1.8.40 - Authenticated (Contributor+) SQL Injection via &apos;order_by&apos; Shortcode Attribute</title><link>https://agentprime.io/advisories/CVE-2026-7048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7048/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 May 2026 07:43:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1036: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion</title><link>https://agentprime.io/advisories/CVE-2026-1036/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1036/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Jan 2026 23:23:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2269: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.34 Reflected Cross-Site Scripting via &apos;image_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2025-2269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2269/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Apr 2025 23:21:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9878: Photo Gallery by 10Web &lt;= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-9878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9878/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Nov 2024 09:30:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5481: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function</title><link>https://agentprime.io/advisories/CVE-2024-5481/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5481/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jun 2024 09:33:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5426: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG</title><link>https://agentprime.io/advisories/CVE-2024-5426/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5426/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jun 2024 09:33:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2296: Photo Gallery by 10Web – Mobile-Friendly Image Gallery &lt;= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG</title><link>https://agentprime.io/advisories/CVE-2024-2296/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2296/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Apr 2024 08:38:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0221: Photo Gallery by 10Web - Mobile-Friendly Image Gallery &lt;= 1.8.19 - Directory Traversal to Arbitrary File Rename</title><link>https://agentprime.io/advisories/CVE-2024-0221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0221/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Feb 2024 21:21:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-6924: Photo Gallery by 10Web &lt;= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget</title><link>https://agentprime.io/advisories/CVE-2023-6924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6924/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 08:32:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1394: Photo Gallery &lt; 1.6.4 - Admin+ Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2022-1394/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1394/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Jun 2022 08:50:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1282: Photo Gallery &lt; 1.6.3 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2022-1282/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1282/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 May 2022 16:05:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1281: Photo Gallery &lt; 1.6.3 - Unauthenticated SQL Injection</title><link>https://agentprime.io/advisories/CVE-2022-1281/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1281/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 May 2022 16:05:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0169: Photo Gallery by 10Web &lt; 1.6.0 - Unauthenticated SQL Injection</title><link>https://agentprime.io/advisories/CVE-2022-0169/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0169/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Mar 2022 14:41:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25041: Photo Gallery by 10Web &lt; 1.5.68 - Reflected Cross-Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2021-25041/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25041/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Dec 2021 15:55:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-24363: Photo Gallery &lt; 1.5.75 - File Upload Path Traversal</title><link>https://agentprime.io/advisories/CVE-2021-24363/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-24363/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Aug 2021 10:48:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-24362: Photo Gallery &lt; 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG</title><link>https://agentprime.io/advisories/CVE-2021-24362/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-24362/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Aug 2021 10:48:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-24310: Photo Gallery &lt; 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title</title><link>https://agentprime.io/advisories/CVE-2021-24310/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-24310/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Jun 2021 11:33:29 GMT</pubDate><category>CVE</category></item></channel></rss>