Lucene search
K

6 matches found

CNVD
CNVD
added 2025/07/30 12:0 a.m.1 views

WordPress Mine CloudVod Cross-Site Scripting Vulnerability

WordPress Mine CloudVod is a plugin for audio and video playback and online education management. WordPress Mine CloudVod suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and output escaping, which can be exploited by an attacker to inject malicious...

6.4CVSS6.4AI score0.00228EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/24 9:22 a.m.2 views

CVE-2025-8071 Mine CloudVod <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via audio Parameter

Mine CloudVod plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘audio’ parameter in all versions up to, and including, 2.1.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

6.4CVSS5.6AI score0.00228EPSS
Exploits0References5
CVE
CVE
added 2025/07/24 9:22 a.m.16 views

CVE-2025-8071

CVE-2025-8071 : Mine CloudVod plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability via the audio parameter in all versions up to 2.1.10. The issue arises from insufficient input sanitization and output escaping. It affects authenticated attackers with Contributor-level acces...

6.4CVSS5.5AI score0.00228EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/07/24 12:0 a.m.1 views

WordPress plugin Mine CloudVod 跨站脚本漏洞

WordPress Mine CloudVod is a plugin for audio and video playback and online education management. WordPress Mine CloudVod suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and output escaping, which can be exploited by an attacker to inject malicious...

6.4CVSS6.2AI score0.00228EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/24 12:0 a.m.0 views

PT-2025-30661 · WordPress · Mine Cloudvod

Name of the Vulnerable Software and Affected Versions: Mine CloudVod plugin for WordPress versions up to and including 2.1.10 Description: The Mine CloudVod plugin for WordPress is susceptible to Stored Cross-Site Scripting XSS through the audio parameter. Insufficient input sanitization and outp...

6.4CVSS5.5AI score0.00228EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/07/23 9:32 p.m.4 views

WordPress Mine CloudVod plugin <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via audio Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via audio Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Mine CloudVod versions = 2.1.10...

6.4CVSS5.5AI score0.00228EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder