The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter.
CPE | Name | Operator | Version |
---|---|---|---|
alpine-photo-tile-for-instagram | lt | 1.2.7.6 |