CVE-2025-62910: WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XS

WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XSS) vulnerability

Status

Published

2025-10-27

Updated

2026-04-28

Assigning organization

Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through <= 10.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

deshine Video Gallery by Huzzaz

Default version status: unaffected

0 to ≤ 10.5affected

References

https://patchstack.com/database/Wordpress/Plugin/huzzaz-video-gallery/vulnerability/wordpress-video-gallery-by-huzzaz-plugin-10-5-cross-site-scripting-xss-vulnerability?_s_id=cve ↗