Drupal is a free and open content management system software distributed under the GPL license, the development and maintenance of which is carried out by a worldwide community of users and developers.
This plugin creates a avatar_uploader from any post types. The slider import search feature and tab parameter via plugin settings are vulnerable to reflected cross-site scripting.
Proof of Concept (PoC) :
$target to website domain, example : domain.com
This information is published only for security and learning reasons, any kind of damage and misuse is beyond our responsibility. Use this information wisely