CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-24415

The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.2%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

https://wpscan.com/vulnerability/fd312bfd-7c98-4682-877d-846442e9c6a2
https://wpscan.com/vulnerability/fd312bfd-7c98-4682-877d-846442e9c6a2

Products affected by CVE-2021-24415

Bplugins » Polo Video Gallery » Version: N/A

cpe:2.3:a:bplugins:polo_video_gallery:-
Bplugins » Polo Video Gallery » Version: 1.0

cpe:2.3:a:bplugins:polo_video_gallery:1.0
Bplugins » Polo Video Gallery » Version: 1.1

cpe:2.3:a:bplugins:polo_video_gallery:1.1
Bplugins » Polo Video Gallery » Version: 1.2

cpe:2.3:a:bplugins:polo_video_gallery:1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24415

Products

Pricing

Contact Us