CVE-2021-24419

The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyteytapikey and lytenotification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues...

PT-2021-15951

Name of the Vulnerable Software and Affected Versions WP YouTube Lyte WordPress plugin versions prior to 1.7.16 Description The issue allows high privilege users to set XSS payload on the lyte yt api key and lyte notification settings, leading to stored Cross-Site Scripting issues due to the lack...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WP YouTube Lyte WordPress plugin version prior ...