Video Player For Youtube Project vulnerabilities

1 vulnerability

Known vulnerabilities in Video Player For Youtube Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
5.4MediumCVE-2021-24414unknown · video player for youtube +2 moreYT Player < 1.4 - Contributor+ Stored Cross-Site ScriptingThe Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcodeEPSS0.62%