Skip to content
OpenAdvisories
Unscored CVE-2013-3254 EUVD-2013-3191GHSA-jg72-c4wx-6v5x

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote a…

Published May 10, 2013 · Updated Sep 16, 2024 · Assigned by flexera

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the commentid parameter in a wppa_manage_comments edit action.

References