Aarondeee

The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "tab" parameter in the "/wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings" API endpoint.