TI-2024-10499 CVE-2024-11333 · GHSA-wmcw-7p38-7j74
HLS Player <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The HLS Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hls_player' shortcode in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output esca…