A vulnerability has been found in WP Photo Album Plus Plugin up to 9.1.05.008 on WordPress and classified as problematic. This impacts an unknown function of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-14835. Remote exploitation of the attack is possible. No exploit is available.