Input validation vulnerability in Picture Gallery – Frontend Image Uploads, AJAX Photo List 1.4.2

The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to malicious code being stored on the website. This malicious code can be used to gain access to the website and potentially cause harm. Versions up to, and including, 1.4.2 are affected by this vulnerability as they do not have sufficient security measures in place to protect the website from malicious code. This vulnerability only affects multi-site installations and installations where the ability to use ‘unfiltered_html’ has been disabled.