Beveiligingsadvies

CVE-2021-24540

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-08-16 10:48:31
Laatst bijgewerkt 2024-08-03 19:35:19
Toegewezen door WPScan
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Wonder Video Embed WordPress plugin before 1.8 does not escape parameters of its wonderplugin_video shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks.