WordPress WP Photo Album Plus Plugin 'wppa-tag' Cross Site Scripting Vulnerability

Bugtraq ID:	57316
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 14 2013 12:00AM
Updated:	Jan 14 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	WordPress WP Photo Album Plus 4.9.2 WordPress WP Photo Album Plus 4.9.1 WordPress WP Photo Album Plus 4.8.12
Not Vulnerable:	WordPress WP Photo Album Plus 4.9.3

WordPress WP Photo Album Plus Plugin 'wppa-tag' Cross Site Scripting Vulnerability

The WP Photo Album Plus plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

WordPress WP Photo Album Plus Plugin 'wppa-tag' Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

WordPress WP Photo Album Plus Plugin 'wppa-tag' Cross Site Scripting Vulnerability

Solution:
Vendor patch is available. Please see the references for more information.

WordPress WP Photo Album Plus Plugin 'wppa-tag' Cross Site Scripting Vulnerability

References:

• Changes in wp-photo-album-plus/trunk/wppa-functions.php (WordPress Production)
  
• Keyring Changelog Page (WordPress)
  
• WordPress Homepage (WordPress)