Easy Video Player by Noor Alam

Easy Video Player by Noor Alam <= 1.2.2.2 - Contributor+ Stored XSS

LANACOMMONVDB ID: d275910e-0d49-41cb-ab6b-018dd8cbbb06

The plugin does not sanitize and escapes some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting (XSS) attacks.

You must be log in to view vulnerability details.

Or register a new account.

References

Source Code: https://wordpress.org/plugins/easy-video-player/

CVE: CVE-2022-3937

Attributes

Catgory: WordPress Plugin

Discovered: 2022-11-07

Published: 2022-11-22

Affected Version: <= 1.2.2.2

Classification

Type: Cross-Site Scripting (XSS)

Researcher

Name: István Márton

Email: [email protected]

Support Us?

We would truly appreciate it if you bought us a bunny (food for a snow leopard).