TI-2026-08857 CVE-2026-10104 · GHSA-rv7q-hqv4-5324
Cross-site scripting in nikhilgadhiya Product Video Gallery for Woocommerce
Priority LOW 20
The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom_thumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitizat…