Skip to content
OpenAdvisories
High · 7.1 CVE-2024-32533 EUVD-2024-30335GHSA-jmjj-h682-vmmh

WordPress LH Add Media From Url plugin <= 1.22 - Reflected Cross Site Scripting (XSS) vulnerability

Published Apr 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Add Media From Url allows Reflected XSS.This issue affects LH Add Media From Url: from n/a through 1.22.

Affected products

VendorProductAffectedFixed
Peter Shaw LH Add Media From Url ≤ 1.22 —

References