CVE-2023-0282 — YourChannel < 1.2.2 - Subscriber+ Stored XSS

CVE-2023-0282

YourChannel < 1.2.2 - Subscriber+ Stored XSS PUBLISHED

Description (CNA)

The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / YourChannel: Everything you want in a YouTube plugin.	affected 0 before 1.2.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/93693d45-5217-4571-bae5-aab8878cfe62

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/93693d45-5217-4571-bae5-aab8878cfe62

CISA-ADP

No English description supplied.

No references supplied.