CVE-2021-24665 | BDVDB-2026-159772 Detail

WP Video Lightbox

Description#

The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://www.fortiguard.com/zeroday/FG-VD-21-059
https://wpscan.com/vulnerability/42a8947f-2ae5-4f12-bd3d-ab3716501df5

Exploit#

No public exploit known

History#

Version 12021-08-30Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.