Embed Youtube Video Security Vulnerabilities - February

cve

CVE-2021-24395

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

7.2CVSS

7.2AI Score

0.001EPSS

2021-09-06 11:15 AM