Input validation vulnerability in Photo Gallery by 10Web – Mobile-Friendly Image Gallery 1.5.68

The Photo Gallery by 10Web plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This issue can occur in versions of the plugin up to and including 1.5.68. It happens when attackers are able to inject malicious web scripts into pages by tricking users into performing an action such as clicking on a link. This is possible because the plugin does not properly sanitize the inputs or escape the outputs of certain parameters, like ‘album_gallery_id_0’, ‘bwg_album_search_0’, and ‘type_0’.