CVE-2026-115951

The Kevin Weber Lazy Load for Videos plugin (versions through 2.18.11 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This vulnerability stems from the improper neutralization of input during web page generation . While the specific technical root cause or vulnerable function is not ...