All-in-One Video Gallery, CVE-2021-24970

CVE, Research URL: CVE-2021-24970
Home page URL: Security reports for All-in-One Video Gallery
Application: All-in-One Video Gallery
Published on: Dec 13, 2021
Research Description: The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue
Affected versions: max 2.5.4.
Status: vulnerable