Cross-site Scripting Vulnerability in Video Expander Plugin by Bcupham

CVE-2025-52771

What is CVE-2025-52771?

The Video Expander plugin for WordPress by Bcupham is susceptible to a cross-site scripting (XSS) vulnerability due to improper handling of user input during webpage generation. This flaw allows attackers to inject malicious scripts that can be stored and executed in the context of a victim's browser, potentially leading to unauthorized actions and data exposure. Users of the plugin, particularly those on version 1.0 and earlier, are urged to implement security measures to mitigate this risk.

References