CVE-2023-24002
Published Apr 6, 2023Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.
Vendor/product archive
2 CVEs tagged to wpdevart / youtube_embed,_playlist_and_popup — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role…