All-in-One Video Gallery WordPress plugin stored XSS
Regular members of a WordPress video gallery plugin can target administrators.
Summary
The All-in-One Video Gallery plugin does not escape a stored video thumbnail URL, so even a Subscriber-level user can launch stored XSS attacks against administrators. Versions before 5.1.0 are affected.
Affected when
- Subscriber-level user account or higher
What to do
Update All-in-One Video Gallery to 5.1.0 or later.
Products and platforms
CVE IDs
Sources
- Write-up: wpscan.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen