Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-52771 EUVD-2025-24890GHSA-jwfw-92r8-wf4c

WordPress Video Expander Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bcupham Video Expander video-expander allows Stored XSS.This issue affects Video Expander: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
bcupham Video Expander ≤ 1.0 —

References