Security Advisory

CVE-2013-3254

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-05-10 10:00:00

Last updated 2024-09-16 18:08:00

Assigner flexera

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the commentid parameter in a wppa_manage_comments edit action.

← Browse all CVEs View on cve.org ↗