← Back to CVE search

CVE-2026-57675

WP Photo Album Plus

Description

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

CVSS 7.1EPSS 0.186%Risk 0.72

Published: 2026-07-02 12:17:38
Affected versions: <=9.2.02.004
Type: Web application
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L