Threats tagged 'ghsa-r575-mm3x-7j8j'

A stored cross-site scripting (XSS) vulnerability exists in Plugins360 Labs All-in-One Video Gallery up to version 5.0.0. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers with limited privileges to inject malicious scripts that execute in the context of other users. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.