CVE-2023-0153 Vimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSS

The Vimeo Video Autoplay Automute WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

PT-2023-16042

Name of the Vulnerable Software and Affected Versions Vimeo Video Autoplay Automute WordPress plugin version 1.0 Description The issue concerns a lack of validation and escaping of certain shortcode attributes in the Vimeo Video Autoplay Automute WordPress plugin. This could allow users with the...

CVE-2023-0153: Undefined Security Weakness

The Vimeo Video Autoplay Automute WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...