Plugin inspection:

ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML

Potentially unsafe

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should very carefully consider its potential problems and should conduct a thorough assessment. Read more about this recommendation.

Findings

This plugin is not well organised and contains numerous instances of poor input sanitisation and a likely XSS in its admin interface.

Reason for the 'Potentially unsafe' result

The plugin contains or is likely to contain a vulnerability which could be exploited by an end user and which would compromise the site’s confidentiality, integrity or availability:

This plugin probably contains an XSS in its admin interface.

Failure criteria

  • Lack of input sanitisation
  • Poor architecture
  • Lack of proper output escaping

Read more about our failure criteria.