Medium severity5.4NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026
CVE-2022-3937
CVE-2022-3937
Description
The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:noorsplugin:easy_video_player:*:*:*:*:*:wordpress:*:*Range: <1.2.2.3
- Easy Video Player/Easy Video Player WordPress plugindescription
- Range: <1.2.2.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ac7158c5-3d11-4865-b26f-41ab5a8120afnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.