CVE-2024-4324: 
WordPress vulnerability analysis and mitigation

The WP Video Lightbox plugin for WordPress contains a Stored Cross-Site Scripting vulnerability (CVE-2024-4324) discovered in all versions up to and including 1.9.10. The vulnerability was identified in the 'width' parameter due to insufficient input sanitization and output escaping (NVD).

The vulnerability is classified as a Stored Cross-Site Scripting (XSS) issue that affects the 'width' parameter in the WP Video Lightbox WordPress plugin. The CVSS v3.1 base score is 6.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N, indicating network accessibility with low attack complexity and requiring low privileges (NVD).

When exploited, this vulnerability allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages. These malicious scripts will execute whenever a user accesses an affected page, potentially compromising the security of site visitors (NVD).

The vulnerability requires an authenticated user with at least contributor-level privileges to exploit. The attacker must have the ability to modify content using the WP Video Lightbox plugin's 'width' parameter (NVD).

Users should update the WP Video Lightbox plugin to a version newer than 1.9.10 if available. If an update is not available, consider disabling the plugin until a patch is released (NVD).