quantumcloud simple_video_directory Schwachstellen (CVE)

Für quantumcloud simple_video_directory veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
9.8Kritisch
CVE-2024-6809

Simple Video Directory < 1.4.3 - Unauthenticated SQLi

Simple Video Directory

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

6.1Mittel
CVE-2024-5811

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS

Simple Video Directory; quantumcloud simple_video_directory

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…