Input validation vulnerability in Photo Gallery by 10Web – Mobile-Friendly Image Gallery 1.6.7

The Photo Gallery by 10Web plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This type of attack can be done by people with administrative privileges, allowing them to inject harmful code into a website page. This code can then be executed when someone accesses the page, potentially causing harm. This type of vulnerability only affects multi-site installations and installations that have disabled a feature called unfiltered_html. Versions of the Photo Gallery by 10Web plugin up to and including 1.6.7 are affected.