5.4
Medium
CVE-2023-0282 The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with…
Description
The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| YourChannel: Everything you want in a YouTube plugin. 1.2 | earliest → < 1.2.2 | 1.2.2 |