Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-38713 EUVD-2024-37564GHSA-7c38-xxmq-vp5q

WordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability

Published Jul 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.02.002.

Affected products

VendorProductAffectedFixed
J.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus ≤ 8.8.02.002 —

References