CVE-2024-5811

CVE-2024-5811 affects the WordPress plugin Simple Video Directory (before 1.4.4). The issue stems from insufficient sanitisation/escaping of certain plugin settings, enabling Stored XSS by contributors and higher, even when unfiltered_html is disallowed (e.g., multisite). Public details from Red ...

CVE-2024-6809

The Simple Video Directory WordPress plugin (versions prior to 1.4.3 ) is vulnerable to SQL injection due to insufficient sanitization and escaping of a parameter used in a SQL statement. This flaw is reachable via an AJAX action accessible to unauthenticated users . Exploitation could allow an a...