Cross-site Scripting Vulnerability in Video List Manager by thanhtungtnt

CVE-2025-52776

What is CVE-2025-52776?

The Video List Manager plugin by thanhtungtnt is prone to a Stored XSS vulnerability due to improper input handling during web page generation. This flaw allows attackers to inject malicious scripts that are stored on the server and executed in the browsers of users who view the impacted pages. The security risk arises from versions prior to 1.7, which can lead to significant exposure for sites using this plugin, compromising user data and integrity.

References