CVE-2023-25982

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Eirudo Simple YouTube Responsive plugin = 2.5 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Eirudo Simple YouTube Responsive plugin = 2.5 versions...

CVE-2023-25982

CVE-2023-25982 is a stored XSS vulnerability in the WordPress plugin “Eirudo Simple YouTube Responsive” <= 2.5. Technical details in connected docs show the issue affects the plugin’s handling of input via Shortcodes, enabling stored cross-site scripting under contributor+ privileges. The root...

PT-2023-20407 · WordPress · Eirudo Simple Youtube Responsive

Name of the Vulnerable Software and Affected Versions: Eirudo Simple YouTube Responsive plugin versions = 2.5 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. There is no information provided about the...