TI-2025-02704 CVE-2025-3098 · GHSA-xjx5-qphq-p9gj
Video Url <= 1.0.0.3 - Reflected Cross-Site Scripting
Priority LOW 27
The Video Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.0.0.3 due to insufficient input sanitization and output escaping.