CVE-2024-29808: 
WordPress vulnerability analysis and mitigation

The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php in Photo Gallery by 10Web WordPress plugin is vulnerable to reflected Cross Site Scripting (XSS). The vulnerability allows arbitrary JavaScript to be inserted and executed when the value of the image_id parameter is embedded within existing JavaScript in the response. This vulnerability requires an authenticated user with permissions to access the component for successful exploitation (AppCheck Blog).

The vulnerability exists in the editimage_bwg AJAX action handler where the image_id parameter is not properly sanitized before being embedded in JavaScript code within the response. The plugin has a CVSS v3.1 Base Score of 5.4 (Medium) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, indicating that it requires network access, low attack complexity, low privileges, and user interaction (NVD).

If successfully exploited, an attacker could execute arbitrary JavaScript code in the context of an authenticated user's browser session. This could potentially lead to theft of sensitive information, session hijacking, or other malicious actions performed with the user's privileges (AppCheck Blog).

The vulnerability requires an authenticated user with appropriate permissions to access the affected component. The attacker must craft a specific payload targeting the image_id parameter and convince the authenticated user to trigger the malicious request (AppCheck Blog).

Users should upgrade to version 1.8.22 or later of the Photo Gallery by 10Web plugin, which contains fixes for this vulnerability and other security issues (WordPress Plugin).