The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyone who follows a crafted gallery link and clicks the breadcrumb, including a logged-in administrator.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 18 Oct 2026 06:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyone who follows a crafted gallery link and clicks the breadcrumb, including a logged-in administrator. | |
| Title | WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2026-10-18T06:00:16.701Z
Reserved: 2026-10-15T10:45:26.782Z
Link: CVE-2026-110981
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-18T07:16:52.817
Modified: 2026-10-18T07:16:52.817
Link: CVE-2026-110981
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.