CVE-2024-5475

CVE-2024-5475 affects the Responsive video embed WordPress plugin prior to 0.5.1. The issue arises from insufficient validation/escaping of certain shortcode attributes, enabling stored XSS when a post uses the shortcode. Exploitation requires at least Contributor+ privileges. Red Hat and Patchst...