jgj212/Advisories

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-12977 ↗	Aug 21, 2017Monday, 21 August 2017, 01:29	—	6.5 MEDIUM
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.