CVE-2024-37442

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.

Score

CVSS 3.1 5.5 Medium

Status

Modified - audit@patchstack.com

Published

2024-07-09

Last modified

2026-04-28

Weaknesses

CWE-74

Affected products

• Photo Gallery (Ays-pro)
• Photo Gallery By Ays (Photo Gallery Team)

References

• https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gal…