CyberRota Analysis
AI-GeneratedThe PhotoSwipe WordPress plugin versions up to 4.1.1.1 are vulnerable due to improper handling of the title attribute in author-supplied link markup, allowing an authenticated user with Author-level access to inject a JavaScript payload. This can lead to cross-site scripting (XSS) attacks, potentially affecting any visitor, including administrators, who interacts with the compromised link. WordPress site administrators and developers using this plugin should prioritize patching or updating to mitigate the risk of exploitation.
Original NVD Description
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered_html capability, an authenticated user with Author-level access can store a JavaScript payload that executes in the browser of any visitor, including an administrator, who clicks the link.