Threats tagged 'ghsa-6hgv-m769-c54w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-109974The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress Medium6.42026-10-28GCVE DatabaseCVE-2026-109974 The All-in-One Video Gallery plugin for WordPress, up to and including version 4.9.7, contains a stored cross-site scripting (XSS) vulnerability via the 'more_link' parameter. This flaw allows authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages. Report on CVE-2026-109974 Vulnerability CWE-79 #ghsa-6hgv-m769-c54w	GCVE Database	2026-10-28

Page 1 of 1