Wp Video Lightbox Security Vulnerabilities and Issues — Wp Video Lightbox CVE List

Lucene search

Tipsandtricks-hqWp Video Lightbox

3 matches found

CVE•added 2022/07/25 1:15 p.m.•56 views

CVE-2022-2189

The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

6.1CVSS6.1AI score0.00079EPSS

CVE•added 2021/08/30 3:15 p.m.•39 views

CVE-2021-24665

The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks

5.4CVSS5.3AI score0.0018EPSS

CVE•added 2023/01/16 4:15 p.m.•29 views

CVE-2022-4465

The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privil...

5.4CVSS5.3AI score0.00113EPSS