Input validation vulnerability in Gallery – Photo Albums Plugin 1.2.29

The Gallery – Photo Albums Plugin for WordPress is vulnerable to a type of cyberattack known as Stored Cross-Site Scripting. This type of attack can be executed by attackers with administrator-level permissions and above. It allows them to inject malicious web scripts into pages, which will execute automatically when the page is accessed. Versions up to, and including, 1.2.28 are affected as the plugin does not properly sanitize input and escape output.