medium6.5
CVE-2024-5522
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing u…
Impact
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bplugins | Html5 Video Player | before 2.5.27 |