Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

youtube embed project youtube embed vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2021-24471
The YouTube Embed WordPress plugin prior to 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. using w, h, controls, cc_lang, color, language, start, stop, or style parameter of youtube shortcode, 2. by using style, cl...
Youtube Embed Project Youtube Embed
3.5
CVSSv2
CVE-2015-6535
Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin prior to 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field (youtube_embed_name parameter).
Youtube Embed Project Youtube Embed
NA
CVE-2022-4783
The Youtube Channel Gallery WordPress plugin up to and including 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Store...
Youtube Channel Gallery Project Youtube Channel Gallery
3.5
CVSSv2
CVE-2021-24414
The Video Player for YouTube WordPress plugin prior to 1.4 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious ...
Video Player For Youtube Project Video Player For Youtube
3.5
CVSSv2
CVE-2020-7642
lazysizes up to and including 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript.
Lazysizes Project Lazysizes
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook