Skip to content
Threat Feed
Subscribe

Product

WP Photo Album Plus (<= 9.2.08.003)

1 brief RSS
high advisory

Stored XSS Vulnerability in WP Photo Album Plus Plugin

An unauthenticated stored XSS vulnerability in WP Photo Album Plus versions 9.2.08.003 and earlier allows attackers to inject malicious scripts via the HTTP_X_FORWARDED_FOR header, which is logged without sanitization.

WP Photo Album Plus web-application xss wordpress
1r 2t 1c