CVE-2020-9335: 10web Photo Gallery

Medium severity, CVSS 4.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.

Affected products

• 10web Photo Gallery: before 1.5.46 (fixed in 1.5.46)

Published 2020-02-25. Last modified 2026-06-17.