The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their settings, which coul…
Medium CVSS 4.8
Summary
The Video Lessons Manager WordPress plugin before 1.7.2 and Video Lessons Manager Pro WordPress plugin before 3.5.9 do not properly sanitize and escape values when updating their settings, which could allow high privilege users to perform Cross-Site Scripting attacks
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://wpscan.com/vulnerability/4a90be69-41eb-43e9-962d-34316497b4df Exploit
- https://wpscan.com/vulnerability/4a90be69-41eb-43e9-962d-34316497b4df Exploit
Timeline
- nvd_ingest NVD