CVE-2017-6817

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...

PT-2017-17348

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.3 Description The issue concerns authenticated Cross-Site Scripting XSS in YouTube URL Embeds, which can be exploited due to a flaw in the embed.php file. Recommendations For versions prior to 4.7.3, update to...

CVE-2017-6817: Improper Neutralization of Input During Web Page Generation

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...

CVE-2009-3153: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

CVE-2008-2723

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...

CVE-2008-2723

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...

CVE-2008-2723: Exposure of Sensitive Information to an Unauthorized Actor

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...