Input validation vulnerability in Alpine Photo Tile for Instagram 1.2.9

The Alpine PhotoTile For Instagram plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This attack can take place in versions up to 1.2.9 of the plugin. It happens when a user visits a website that has this plugin installed. The attack takes advantage of insufficient input sanitization and output escaping on the ‘general_lightbox_params’ parameter. This allows unauthenticated attackers to inject malicious web scripts which then execute in the browser of someone viewing the page.