CVE-2023-49180

MEDIO 4.8CVE-2023-49180 · Published 15/12/2023 · updated 17/06/2026

In breve

CVE-2023-49180 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda automatic youtube video posts (ternstyle).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.39%, superiore al 32.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
automatic youtube video posts ternstyle	`≤ 5.2.2`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ternstyle LLC Automatic Youtube Video Posts Plugin allows Stored XSS.This issue affects Automatic Youtube Video Posts Plugin: from n/a through 5.2.2.

References

patchstack.com/database/vulnerability/automatic-youtube-video-posts/wordpress-automatic-youtube-video-posts-plugin-plugin-5-2-2-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free