CVE-2021-24139

CVE-2021-24139: Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

Vendor Unknown
Product Photo Gallery by 10Web
Weakness CWE-89 · SQLi
Published March 18, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwg_search_x parameter.

Key dates

02Disclosure timeline

March 18, 2021 CVE published
August 3, 2024 Record updated