Lucene search
+L

108 matches found

Prion
Prion
•added 2015/08/31 6:59 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

3.5CVSS6.2AI score0.01277EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2015/08/31 6:00 p.m.•47 views

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

5.7AI score0.01277EPSS
SaveExploits2References4
Mend
Mend
•added 2015/08/31 6:00 p.m.•4 views

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

3.5CVSS0.01277EPSS
SaveExploits2References4
CVE
CVE
•added 2015/08/31 6:00 p.m.•66 views

CVE-2015-6535

This CVE concerns WordPress YouTube Embed plugin (software: YouTube Embed; version 3.3.2, potentially earlier) with a stored XSS in includes/options-profiles.php. The vulnerability arises from unsanitized input in the Profile name field (youtube_embed_name parameter), allowing an admin user to in...

3.5CVSS5.9AI score0.01277EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
•added 2015/08/31 12:00 a.m.•6 views

PT-2015-7291

Name of the Vulnerable Software and Affected Versions YouTube Embed plugin versions prior to 3.3.3 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote administrators to inject arbitrary web script or HTML via the youtube embed name parameter in the Profi...

3.5CVSS0.01277EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/31 12:00 a.m.•8 views

CVE-2015-6535: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

3.5CVSS5.9AI score0.01277EPSS
SaveExploits2References2
zdt
zdt
•added 2015/08/27 12:00 a.m.•67 views

WordPress YouTube Embed 3.3.2 Cross Site Scripting Vulnerability

WordPress YouTube Embed plugin version 3.3.2 suffers from a stored cross site scripting vulnerability. Details ================ Software: YouTube Embed Version: 3.3.2 Homepage: https://wordpress.org/plugins/youtube-embed/ CVE ID: CVE-2015-6535 Pending CWE ID: CWE-79 CVSS: 5.5 Medium;...

3.5CVSS5.9AI score0.01277EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2015/08/26 12:00 a.m.•67 views

WordPress YouTube Embed 3.3.2 Cross Site Scripting

Details ================ Software: YouTube Embed Version: 3.3.2 Homepage: https://wordpress.org/plugins/youtube-embed/ CVE ID: CVE-2015-6535 Pending CWE ID: CWE-79 CVSS: 5.5 Medium; AV:N/AC:L/Au:S/C:P/I:P/A:N Description ================ A stored XSS vulnerability in YouTube Embed 3.3.2 and...

3.5CVSS6.7AI score0.01277EPSS
SaveExploits2
Rows per page
Query Builder