WordPress · All-In-One Video Gallery · CVE-2021-24970
Name of the Vulnerable Software and Affected Versions:
All-in-One Video Gallery WordPress plugin versions prior to 2.5.0
Description:
The issue arises from the lack of sanitization and validation of the `tab` parameter, which is used in a require statement within the admin dashboard. This leads to a Local File Inclusion issue.
Recommendations:
For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.