Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:video_embed:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductVideo Embed (e687365c-4da0-53aa-b947-d5e39cce5d82)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24337 vulnerable 2026-06-08 05:30:04.209470 Video Embed <= 1.0 - Authenticated (subscriber+) SQL Injection
The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowing low privilege users, such as subscribers, to perform SQL injection.
Published: 2021-06-07T10:49:50.000Z
Updated: 2024-08-03T19:28:23.427Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.