CVE-2021-38327

The CVE-2021-38327 entry concerns the YouTube Video Inserter WordPress plugin. It is vulnerable to Reflected Cross-Site Scripting caused by a reflected $_SERVER["PHP_SELF"] value in the adminUI/settings.php file, affecting versions up to and including 1.2.1.0. The vulnerability description is sup...