CVE-2021-31693: XSS
First published: Tue Nov 29 2022(Updated: )
The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-46889. NOTE: VMware information, previously connected to this CVE ID because of a typo, is at CVE-2022-31693.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Tools | >=10.0.0<12.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2021-31693.
What is the severity level of CVE-2021-31693?
CVE-2021-31693 has a severity level of 6.5 (medium).
How does CVE-2021-31693 affect the 10Web Photo Gallery plugin for WordPress?
CVE-2021-31693 allows XSS (Cross-Site Scripting) attacks through certain parameters in the plugin.
Which versions of VMware Tools are affected by CVE-2021-31693?
Versions between 10.0.0 and 12.1.5 of VMware Tools for Windows are affected by CVE-2021-31693.
Is there a fix available for CVE-2021-31693?
At the time of writing, a fix or patch for CVE-2021-31693 has not been released. It is recommended to update to the latest version of the affected software when a fix becomes available.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/vmware
- canonical/vmware tools
- version/vmware tools/10.0.0