CVE-2026-6439

Description

The VideoZen plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.1. This is due to insufficient input sanitization and output escaping in the videozen_conf() function. The 'lang' POST parameter is stored directly via update_option() without any sanitization, and later echoed inside a element without applying esc_textarea() or any equivalent escaping function. This makes it possible for authenticated attackers with Administrator-level access and above to inject arbitrary web scripts into the plugin settings page that will execute whenever any user accesses that page.</p></div> <div class="ds"><h2>Affected Platforms</h2><div><span class="ptag">Unknown</span></div></div> <div class="ds"><h2>Weakness Type</h2><p>CWE-79</p></div> <div class="ds"><h2>References</h2><ul style="list-style:none;display:flex;flex-direction:column;gap:0.4rem;"><li><a href="https://plugins.trac.wordpress.org/browser/videozen/tags/1.0.1/videozen-conf.php#L24" target="_blank" rel="noopener">https://plugins.trac.wordpress.org/browser/videozen/tags/1.0.1/videozen-conf.php…</a></li><li><a href="https://plugins.trac.wordpress.org/browser/videozen/tags/1.0.1/videozen-conf.php#L69" target="_blank" rel="noopener">https://plugins.trac.wordpress.org/browser/videozen/tags/1.0.1/videozen-conf.php…</a></li><li><a href="https://plugins.trac.wordpress.org/browser/videozen/trunk/videozen-conf.php#L24" target="_blank" rel="noopener">https://plugins.trac.wordpress.org/browser/videozen/trunk/videozen-conf.php#L24</a></li><li><a href="https://plugins.trac.wordpress.org/browser/videozen/trunk/videozen-conf.php#L69" target="_blank" rel="noopener">https://plugins.trac.wordpress.org/browser/videozen/trunk/videozen-conf.php#L69</a></li><li><a href="https://www.wordfence.com/threat-intel/vulnerabilities/id/47bcd04b-a479-49f2-94d0-df2a7684210c?source=cve" target="_blank" rel="noopener">https://www.wordfence.com/threat-intel/vulnerabilities/id/47bcd04b-a479-49f2-94d…</a></li></ul></div> </div> <div class="wrap"><footer><span>© 2025 Artfical DT</span><div style="display:flex;gap:1.2rem;"><a href="/privacy?lang=en">Privacy Policy</a><a href="https://artfical.com">artfical.com</a></div></footer></div> <script src="/__defend3r/badge.js" defer data-defend3r="1" data-position="br"></script></body></html>