CVE-2023-0446

The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2023-0446

CVE-2023-0446 affects the WordPress plugin My YouTube Channel. The vulnerability is a Stored Cross-Site Scripting flaw in the plugin’s settings parameters caused by insufficient input sanitization and output escaping, impacting versions up to 3.0.12.1 (or 3.0.12 as cited by some sources). Exploit...

CVE-2023-0446 My YouTube Channel <= 3.0.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

WordPress YouTube Channel Plugin < 3.23.0 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Channel Type Plugin Vulnerable versions 3.23.0 Fixed in 3.23.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0446 Patch priority Low CVSS severity Low 5.9 Developer Aleksandar Urošević PSID ab5cffdea3e3 Credits Marco Wotschka...