CyberRota Analysis
AI-GeneratedThe WP Photo Album Plus WordPress plugin prior to version 9.2.07.002 is vulnerable to Reflected Cross-Site Scripting (XSS) due to inadequate sanitization and escaping of parameters in inline script blocks. This flaw allows unauthenticated attackers to execute malicious scripts on the browsers of users who access specially crafted links to gallery pages. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of potential XSS attacks.
Original NVD Description
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted link to a page displaying one of its galleries.