quantumcloud simple_video_directory vulnerabilities (CVE)

CVE records published for quantumcloud simple_video_directory, newest first. Follow to get an email when a new one appears.

2 results
9.8Critical
CVE-2024-6809

Simple Video Directory < 1.4.3 - Unauthenticated SQLi

Simple Video Directory

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

6.1Medium
CVE-2024-5811

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS

Simple Video Directory; quantumcloud simple_video_directory

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…