CVE-2010-4875

Vodpod Video Gallery Plugin <3.1.5 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by John Leitch · textwebappsphp

https://www.exploit-db.com/exploits/34976

View Code ZIP pw:eip

References (6)

[Exploit] http://osvdb.org/69084

[Exploit] http://packetstormsecurity.org/1011-exploits/wpvodpod-xss.txt

[Vendor Advisory] http://secunia.com/advisories/42195

[Exploit] http://www.johnleitch.net/Vulnerabilities/WordPress.Vodpod.Video.Gallery.3.1.5.Reflected.Cross-site.Scripting/58

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/63057

[Third Party Advisory] http://securityreason.com/securityalert/8431

Scores

EPSS 0.0168

EPSS Percentile 81.9%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

xondie/vodpod_video_gallery

Timeline

Published Oct 07, 2011

Tracked Since Feb 18, 2026