Not rated
CVE-2021-24395 The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or…
Description
The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Embed Youtube Video | 1.0 | No fix stated |