Description (CNA)
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / YouTube Embed, Playlist and Popup by WpDevArt | affected 2.3.9 before 2.3.9 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.