Reflected Cross-Site Scripting in Photo Gallery by 10Web Plugin for WordPress

CVE-2025-2269

What is CVE-2025-2269?

The Photo Gallery by 10Web plugin for WordPress is susceptible to a reflected cross-site scripting vulnerability via the 'image_id' parameter. This flaw arises due to inadequate input sanitization and output escaping, creating an opportunity for unauthenticated attackers to inject malicious scripts. Such scripts are executed within the context of the user's session if an administrative user is tricked into performing an action, such as clicking a crafted link. This poses potential risks to website integrity and user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References