TI-2021-06707 CVE-2021-24415 · GHSA-3cv4-wq55-4fr6Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site ScriptingPriority LOW 25The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Sit…CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00581 · Published 2021-10-18 · No fix listed CWE-79