The Responsive video embed WordPress plugin before 0.5.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…
CVSS 3.1MEDIUM 5.4·Network·No auth·User interaction·EPSS 0.00367·Published 2024-06-20·Fixed in 0.5.1CWE-79