Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Vulnerabilities - CVE-2014-9098 - Vulnerability Database
WP Plugin Contus Video Gallery

WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Vulnerabilities - CVE-2014-9098

Critical
Reference: CVE-2014-9098
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9098
Title: WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Vulnerabilities
Overview:

WordPress Plugin WORDPRESS VIDEO GALLERY is prone to multiple SQL injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site to steal cookie-based authentication credentials to compromise the application access or modify data or to exploit vulnerabilities in the underlying database. WordPress Plugin WORDPRESS VIDEO GALLERY version 2.3.1 is vulnerable other versions may also be affected.