VYPR

Lazy Load Videos And Sticky Control

by WordPress

Source repositories

CVEs (1)

  • CVE-2024-11428MedNov 21, 2024
    risk 0.42cvss 6.4epss 0.01

    The Lazy load videos and sticky control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lazy-load-videos-and-sticky-control' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping on…