Aller au contenu
Se connecter
Non notée

CVE-2021-24414 The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its…

Description

The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

Produits et versions touchés

Produit Versions touchées Corrigé en
Video Player for YouTube 1.4 premières → < 1.4 1.4

Autres CVE de Video Player for YouTube

Les 3 CVE de Video Player for YouTube →
CVE-2026-85007 The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset… 3.8 Faible CVE-2026-84937 The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input… 6.8 Moyenne
Suivre cette CVE