WordPress Apptha Video Gallery Plugin <= 2.5 - Multiple XSS

2014-11-2600:00:00

Claudio Viviani

patchstack.com

0.001 Low

EPSS

Percentile

32.7%

These vulnerabilities allow authenticated users to inject arbitrary web script or HTML via the “videoadssearchQuery” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
apptha video galleryle2.5

CPE	Name	Operator	Version
	apptha video gallery	le	2.5

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9098

0.001 Low

EPSS

Percentile

32.7%

Related for PATCHSTACK:BF2AB2B6A81735BB6E8FF4553B7B9E78