TI-2022-04381 CVE-2022-4785 · GHSA-wgc6-2c2v-35r8Download Video Sidebar Widgets <= 6.1 - Contributor+ Stored XSS via ShortcodePriority MEDIUM 58The Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with t…CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00471 · Published 2023-02-21 · No fix listed