Description
Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attackers to inject arbitrary web script or HTML via the URI.
Remediation
References
Related Vulnerabilities
WordPress 5.0.x Directory Traversal (5.0 - 5.0.21)
WordPress Plugin Admin Custom Login Cross-Site Request Forgery (3.2.7)
WebLogic Improper Input Validation Vulnerability (CVE-2021-44832)
WordPress Plugin One User Avatar-User Profile Picture Multiple Vulnerabilities (2.3.6)
WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3)