Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
readymade video sharing script project readymade video sharing script 3.2