CVE-2021-25115CWE-79

WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)

published February 14, 2022

CVSS
—
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00683 · 51.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-02-14T09:20Z
EPSS history
Timeline
  • 14 FEB 09:20Z
    WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
    cvelistv5