~ / search / CVE-2026-119477

CVE-2026-119477

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

State: published CNA: Patchstack CVSS 3.1 7.1 High NVD: deferred

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003.

Affected products

VendorProductVersions
Jacob N. Breetvelt WP Photo Album Plus ≤9.3.05.003

References

External links from the record. They lead to third-party sites.