CVE-2021-24464
02.08.2021, 11:15
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
| Vendor | Product | Version |
|---|---|---|
| wpdevart | youtube_embed\,_playlist_and_popup | 𝑥 < 2.3.9 |
𝑥
= Vulnerable software versions