PT-2022-9670

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus versions prior to 8.0.10 Description The issue concerns Stored Cross-Site Scripting XSS due to improper handling of error log content. This allows any user, including unauthenticated ones, to execute arbitrary JavaScript in...

CVE-2021-25115: Improper Neutralization of Input During Web Page Generation

The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting XSS. Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel...