Unrated severityNVD Advisory· Published Feb 14, 2022· Updated Aug 3, 2024
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
CVE-2021-25115
Description
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <8.0.10
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changeset/2655859/wp-photo-album-plusmitrex_refsource_CONFIRM
- wpscan.com/vulnerability/dbc18c2c-7547-44fc-8a41-c819757e47a7mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.