5.4
Moyenne
CVE-2023-0282 The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with…
Description
The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| YourChannel: Everything you want in a YouTube plugin. 1.2 | premières → < 1.2.2 | 1.2.2 |