CVE-2022-44590 – WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

https://notcve.org/view.php?id=CVE-2022-44590

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2 on WordPress. Autenticación. ((contributor+) Vulnerabilidad de Cross-Site Scripting (XSS) almacenadas en el complemento Simple Video Embedder de James Lao &lt;= 2.2 en WordPress. The Simple Video Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. • https://patchstack.com/database/vulnerability/simple-video-embedder/wordpress-simple-video-embedder-plugin-2-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve https://wordpress.org/plugins/simple-video-embedder • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •