VYPR

Photoswipe Masonry Gallery

by WordPress

CVEs (1)

  • CVE-2022-0750MedMar 23, 2022
    risk 0.42cvss 6.4epss 0.04

    The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the thumbnail_width, thumbnail_height, max_image_width, and max_image_height parameters found in the ~/photoswipe-masonry.php file which allows…