Input validation vulnerability in Photo Gallery by 10Web – Mobile-Friendly Image Gallery 1.8.18

The Photo Gallery by 10Web plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This is because the plugin does not properly check user input and does not escape output correctly. This means that an attacker with administrator-level or higher permissions can inject malicious code into pages that will run when someone views these pages. It can also be exploited by someone with a contributor-level permission if they have a page builder plugin.