← Database

CVE-2026-120838

MEDIUM CVSS: 6.5 Published: 2026-11-09 Modified: 2026-11-09

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs All-in-One Video Gallery all-in-one-video-gallery allows Stored XSS.This issue affects All-in-One Video Gallery: from n/a through 5.0.0.

Affected Platforms

Unknown

Weakness Type

CWE-79

References