Description
Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id parameter.
References
- 56690 third-party-advisory
- 102717 vdb-entry
- http://packetstormsecurity.com/files/124986/WordPress-Photocrati-Cross-Site-Scripting.html
- photocrati-ecommsizes-xss(90812) vdb-entry
- 65238 vdb-entry