Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:s3bubble_media_streaming_(aws|elementor|youtube|vimeo_functionality):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductS3Bubble Media Streaming (Aws|Elementor|Youtube|Vimeo Functionality) (b05878a6-4d3a-5df9-adbd-81f4b8a2c02c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13862 vulnerable 2026-06-08 06:25:38.645861 S3Bubble Media Streaming <= 8.0 - Reflected XSS
The S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2025-03-11T06:00:11.819Z
Updated: 2025-03-11T14:32:16.696Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.