Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Pushlabs Clear all filters
TI-2022-04252 CVE-2022-4652 · GHSA-47pc-2qf3-m762

Video Background < 2.7.5 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-03-13 Fixed in 2.7.5