Medium · 6.5 CVE-2024-25098 EUVD-2024-22460GHSA-47rf-cwjx-w5r6

WordPress PB oEmbed HTML5 Audio Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)

Published Feb 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pascal Bajorat Product: PB oEmbed HTML5 Audio – with Cache Support

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Bajorat PB oEmbed HTML5 Audio – with Cache Support allows Stored XSS.This issue affects PB oEmbed HTML5 Audio – with Cache Support: from n/a through 2.6.

Affected products

Vendor	Product	Affected	Fixed
Pascal Bajorat	PB oEmbed HTML5 Audio – with Cache Support	≤ 2.6	—

References

https://patchstack.com/database/vulnerability/pb-oembed-html5-audio-with-cache-support/wordpress-pb-oembed-html5-audio-plugin-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry