Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:wp_photo_album_plus:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Stored Cross-Site Scripting in WP Photo Album Plus Plugin

An unauthenticated stored XSS vulnerability in WP Photo Album Plus <= 9.3.03.002 allows attackers to inject malicious scripts via REQUEST_URI session history due to insecure output rendering.

WP Photo Album Plus xss web-vulnerability
2t 1c