CVE-2026-6439 | jconti VideoZen Plugin up to 1.0.1 on WordPress Setting videozen_conf lang cross site scripting

A vulnerability, which was classified as problematic, was found in jconti VideoZen Plugin up to 1.0.1 on WordPress. This affects the function videozen_conf of the component Setting Handler. Such manipulation of the argument lang leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-6439. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.