CVE-2015-3647

Multiple cross-site scripting XSS vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus aka WPPA plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 comemail or 2 comname parameter in a wppa do-comment action...

PT-2015-6254

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus plugin versions prior to 6.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the comemail or comname parameter in a "wppa do-comment" action. Recommendations For ...

CVE-2015-3647: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus aka WPPA plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 comemail or 2 comname parameter in a wppa do-comment action...

WordPress plugin WP Photo Album stores cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin WP Photo Album. Due to the lack of user-supplied filters for scripts passed to the...