CVE-2021-24515

CVE-2021-24515 affects the WordPress plugin Video Gallery – Vimeo and YouTube Gallery (versions before 1.1.5). The vulnerability arises because the plugin does not escape the Title and Description of videos in gallery outputs, enabling Stored Cross-Site Scripting (XSS). Impact details are limited...