← CVE Intelligence

CVE-2021-24515

Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery before outputting them in attributes, leading to Stored Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / Video Gallery - Vimeo and YouTube Galleryaffected 1.1.5 before 1.1.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.