What is GHSA-7jg3-f4j7-jpcg?

GHSA-7jg3-f4j7-jpcg is a security advisory published by GitHub Security Advisories with High severity. Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated...

Which CVE IDs does GHSA-7jg3-f4j7-jpcg cover?

GHSA-7jg3-f4j7-jpcg covers the following CVE IDs: CVE-2017-20250. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7jg3-f4j7-jpcg?

GHSA-7jg3-f4j7-jpcg has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-7jg3-f4j7-jpcgHighCVSS 7.5

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated...

Vendor

GitHub Security Advisories

Published

June 9, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2017-20250 →

📋 Description

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside the intended plugin directory.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2017-20250
https://www.apptha.com
https://www.exploit-db.com/exploits/41566
https://www.vulncheck.com/advisories/wordpress-plugin-mac-photo-gallery-arbitrary-file-download
https://github.com/advisories/GHSA-7jg3-f4j7-jpcg