EUVD-2025-4729

Malicious code in bioql PyPI...

CVE-2024-13589

The YouTube Playlists with Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ytgrid' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13589

The YouTube Playlists with Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ytgrid' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13589 YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The YouTube Playlists with Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ytgrid' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13589 YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The YouTube Playlists with Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ytgrid' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13589

CVE-2024-13589 corresponds to the YouTube Playlists with Schema plugin for WordPress. It is a Stored Cross-Site Scripting (XSS) vulnerability exploitable via the plugin’s yt_grid shortcode in all versions up to 2.6.1. The issue arises from insufficient input sanitization and output escaping of us...

PT-2025-7370

Name of the Vulnerable Software and Affected Versions YouTube Playlists with Schema plugin for WordPress versions up to, and including, 2.6.1 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'yt grid' shortcode due to insufficient input sanitization and output...

CVE-2024-13589: Improper Neutralization of Input During Web Page Generation

The YouTube Playlists with Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ytgrid' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin YouTube Playlists with Schema 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress YouTube Playlists with Schema plugin <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin YouTube Playlists with Schema versions = 2.6.1...

[SECURITY] Fedora 38 Update: haruna-0.10.3-3.fc38

Open source video player built with Qt/QML and libmpv. Features: + play online videos, through youtube-dl; + supports youtube playlists; + toggle playlist with mouse-over, playlist overlays the video; + auto skip chapter containing certain words; + configurable shortcuts and mouse buttons; + quic...

Yout Player suffers from a command execution vulnerability (CNVD-2020-47979)

Yout Player is the new way to watch YouTube playlists on your desktop. No YouTube ads, easy to use, no floating windows. Yout Player suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...

Yout Player suffers from a command execution vulnerability (CNVD-2020-47980)

Yout Player is the new way to watch YouTube playlists on your desktop. No YouTube ads, easy to use, no floating windows. Yout Player suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...