photo-gallery vulnerabilities
CVEs whose affected-version data names the photo-gallery package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-42715High· 7.1Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
▾ Twilight10Web · photo-galleryEPSS 0.18%via NVD
CVE-2026-102377High· 8.8Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions.
Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions.
▾ Twilight10Web · photo-galleryEPSS 0.28%via NVD