PT-2024-17294 · WordPress · Jalbum Bridge

Name of the Vulnerable Software and Affected Versions: jAlbum Bridge plugin for WordPress versions up to, and including, 2.0.15 Description: The issue is related to Stored Cross-Site Scripting via the ar parameter due to insufficient input sanitization and output escaping. This allows authenticat...

WordPress jAlbum Bridge plugin <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via ar Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin jAlbum Bridge versions = 2.0.15...