Vulnerabilidades de quantumcloud simple_video_directory (CVE)

Registros CVE publicados para quantumcloud simple_video_directory, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
9.8Crítica
CVE-2024-6809

Simple Video Directory < 1.4.3 - Unauthenticated SQLi

Simple Video Directory

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

6.1Media
CVE-2024-5811

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS

Simple Video Directory; quantumcloud simple_video_directory

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…