Medium severity6.4NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026
CVE-2021-25115
CVE-2021-25115
Description
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:wppa:wp_photo_album_plus:*:*:*:*:*:wordpress:*:*Range: <8.0.10.006
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <8.0.10
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changeset/2655859/wp-photo-album-plusnvdPatchThird Party Advisory
- wpscan.com/vulnerability/dbc18c2c-7547-44fc-8a41-c819757e47a7nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.