Neurotx

**Name of the Vulnerable Software and Affected Versions** WP Photo Album Plus versions prior to 9.3.02.004 **Description** Cross Site Scripting (XSS) allows an attacker with subscriber privileges to execute malicious scripts in the browser of other users. **Recommendations** Update WP Photo Album Plus to version 9.3.02.004 or later.

**Name of the Vulnerable Software and Affected Versions** Easy Google Maps versions prior to 1.14.7 **Description** Unauthenticated Cross Site Scripting (XSS) allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. **Recommendations** Update Easy Google Maps to version 1.14.7 or later.

**Name of the Vulnerable Software and Affected Versions** Ultimate Maps by Supsystic versions prior to 1.5.6 **Description** Unauthenticated Cross Site Scripting (XSS) allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. **Recommendations** Update Ultimate Maps by Supsystic to version 1.5.6 or later.

**Name of the Vulnerable Software and Affected Versions** Popup by Supsystic versions prior to 1.13.2 **Description** Unauthenticated Cross Site Scripting (XSS) allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. **Recommendations** Update Popup by Supsystic to version 1.13.2 or later.

Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions.