Patch Ticker

WP Photo Album Plus WordPress plugin stored XSS flaw

Malicious scripts can be planted on photo album WordPress plugin pages.

Summary

The WP Photo Album Plus WordPress plugin has a stored XSS flaw that lets an attacker plant malicious scripts on pages. Versions up to and including 9.3.05.003 are affected.

What to do

Update to 9.3.06.001 or later.

Products and platforms

  • WP Photo Album Plus

CVE IDs

Sources

Times

First published

First seen