Portrait Archiv Shop Vulnerabilities

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability found by Ricardo Sanchez in WordPress Portrait-Archiv.com Photostore plugin (versions <= 3.1)

Affected:

up to 3.2

Fixed in:

3.2

Disclosed:

Sep 4, 2019

The Portrait-Archiv.com Photostore plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pDetails’ parameter in versions before 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu...

CVSS:

6.1

Affected:

up to 3.2

Fixed in:

3.2

Disclosed:

Sep 3, 2019

The Portrait-Archiv.com Photostore plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pDetails’ parameter in versions before 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu...

Affected:

up to 3.2

Fixed in:

3.2

Disclosed:

Sep 3, 2019

The &#039;pDetails&#039; GET parameter from the js/imageDetails.php was vulnerable to an unauthenticated reflected XSS attack.

Affected:

up to 3.2

Fixed in:

3.2