WordPress Plugin Vulnerabilities

Alpine PhotoTile - Authenticated Reflected Cross-Site Scripting (XSS)

Description

The alpine-photo-tile-for-instagram WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
alpine-photo-tile-for-instagram
No known fix

References

URL
https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_alpine_phototile_for_instagram_wordpress_plugin.html
URL
https://seclists.org/fulldisclosure/2017/Feb/94

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c7256f1a-b865-40b9-8452-ddc6a88c501e

Timeline

Publicly Published
2017-03-01 (about 9 years ago)
Added
2017-03-03 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-02-21
Title
Google Maps GPX Viewer <= 3.6 - Reflected Cross-Site Scripting
Published
2024-05-22
Title
Arforms < 6.4.1 - Reflected XSS
Published
2024-11-04
Title
SrcSet Responsive Images for WordPress <= 1.4 - Reflected Cross-Site Scripting
Published
2024-04-24
Title
month name translation benaceur < 2.3.8 - Admin+ Stored XSS
Published
2025-01-16
Title
MJ Contact us <= 5.2.3 - Reflected Cross-Site Scripting