CVE-2021-24464

The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue...

PT-2021-15989

Name of the Vulnerable Software and Affected Versions YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin versions prior to 2.3.9 Description The issue is related to an authenticated Stored Cross-Site Scripting problem. It occurs because some shortcode options in the plugin do not...

CVE-2021-24464: Improper Neutralization of Input During Web Page Generation

The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue...