4 matches found
CVE-2021-24515
The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery before outputting them in attributes, leading to Stored Cross-Site Scripting issues...
CVE-2021-24515
The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery before outputting them in attributes, leading to Stored Cross-Site Scripting issues...
CVE-2021-24515 Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site Scripting
The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery before outputting them in attributes, leading to Stored Cross-Site Scripting issues...
CVE-2021-24515
CVE-2021-24515 affects the WordPress plugin Video Gallery – Vimeo and YouTube Gallery (versions before 1.1.5). The vulnerability arises because the plugin does not escape the Title and Description of videos in gallery outputs, enabling Stored Cross-Site Scripting (XSS). Impact details are limited...