CVE-2022-3985

The Videojs HTML5 Player WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:wphowto:videojs_html5_player:*:*:*:*:*:wordpress:*:*

History

07 Nov 2023, 03:52

Type Values Removed Values Added
CWE CWE-79

Information

Published : 2022-12-19 14:15

Updated : 2024-02-28 19:51


NVD link : CVE-2022-3985

Mitre link : CVE-2022-3985

CVE.ORG link : CVE-2022-3985


JSON object : View

Products Affected

wphowto

  • videojs_html5_player
CWE

No CWE.