wordpress video_lightbox vulnerabilities (CVE)

CVE records published for wordpress video_lightbox, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2024-4324 2 years ago

WP Video Lightbox <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter

wptipsntricks WP Video Lightbox; wordpress video_lightbox

The WP Video Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…