| Package | Affected versions | Patched versions |
|---|---|---|
| youtube embed, playlist and popup | < 2.3.9 | 2.3.9 |
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free