PT-2015-7291

Name of the Vulnerable Software and Affected Versions YouTube Embed plugin versions prior to 3.3.3 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote administrators to inject arbitrary web script or HTML via the youtube embed name parameter in the Profi...