CVE-2026-10104-POC

CVE-2026-10104: Product Video Gallery for WooCommerce 내 저장형 크로스 사이트 스크립팅 요약 세부 사항| 값 ---|--- CVE ID| CVE-2026-10104 플러그인| Product Video Gallery for WooCommerce 공급업체| TechnoSoft Webs NikHiL Gadhiya 유형| 저장형 크로스 사이트 스크립팅 XSS CWE| CWE-79 — 웹 페이지 생성 중 입력 값의 부적절한 중립화 CVSS 3.1| 4.4 중간 영향을 받는 버전| ≤ 1.5.1...

Exploit for CVE-2026-10104

CVE-2026-10104: Stored Cross-Site Scripting in Product Video G...

CVE-2026-10104

The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customthumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

EUVD-2026-41269

The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customthumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-10104 Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via custom_thumbnail Parameter

The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customthumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-10104: Improper Neutralization of Input During Web Page Generation

The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customthumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

WordPress Product Video Gallery for Woocommerce plugin <= 1.5.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting vulnerability

Authenticated Shop Manager+ Stored Cross-Site Scripting vulnerability discovered by Ravindu Lakmina Munaweera in WordPress Plugin Product Video Gallery for Woocommerce versions = 1.5.1.8...