Skip to content
Threat Feed
Subscribe

Product

WP Photo Album Plus (<= 9.3.03.002)

1 brief RSS
high advisory

Stored Cross-Site Scripting in WP Photo Album Plus Plugin

An unauthenticated stored XSS vulnerability in WP Photo Album Plus <= 9.3.03.002 allows attackers to inject malicious scripts via REQUEST_URI session history due to insecure output rendering.

WP Photo Album Plus xss web-vulnerability
2t 1c