cleantalk
Vulnerabilities and Security Researches

Video Gallery – Vimeo and YouTube Gallery, CVE-2021-24515

CVE, Research URL

CVE-2021-24515

Published on
Oct 25, 2021
Research Description
The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery before outputting them in attributes, leading to Stored Cross-Site Scripting issues
Affected versions
Min -, max 1.1.5.
Status
vulnerable