← CVE Intelligence

CVE-2022-2189

WP Video Lightbox < 1.9.5 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

Affected (CNA)

Vendor / productVersions
Unknown / WP Video Lightboxaffected 1.9.5 before 1.9.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.