PhotoSmash Galleries WordPress Plugin 'action' Parameter Cross Site Scripting Vulnerability

PhotoSmash Galleries WordPress Plugin 'action' Parameter Cross Site Scripting Vulnerability

References:

Changes in photosmash-galleries (WordPress)
PhotoSmash Galleries Changelog (WordPress)
PhotoSmash Galleries Homepage (Byron Bennett)
HTB22867: XSS in PhotoSmash wordpress plugin (advisory@htbridge.ch)

Privacy Statement
Copyright 2010, SecurityFocus