Low severity3.8NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-37442

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

My Photo Gallery/My Photo Galleryllm-fuzzy
Range: <5.7.1
Photo Gallery Team/Photo Gallery by Aysv5
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-7-1-html-injection-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.247
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000