CVE-2026-114695: WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Stored XSS.This issue affects VOD Infomaniak: from n/a through 1.5.14.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress VOD Infomaniak pluginto a version that resolves this vulnerability.Fixed in 1.5.15
Event History
Frequently Asked Questions
Which installations are affected?
VOD Infomaniak versions through 1.5.14 are affected. The available data does not identify a lower affected version boundary.
What does an attacker need to exploit this issue?
The CVSS vector indicates the attack can be performed over the network with low complexity and without prior privileges. It also requires user interaction.
What is the expected impact of successful exploitation?
This is a stored XSS issue. The supplied CVSS vector rates confidentiality, integrity, and availability impact as low, with scope changed.