WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-66921)

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Wonder Video Embed has a cross-site scripting vulnerability that stems from the product’s failure to properly handle the wonderplugin_ video parameter. An attacker could execute client-side code through this vulnerability.