Vulnerabilities > Andrewrminion > WP Youtube Live > 1.7.16

DATE CVE VULNERABILITY TITLE RISK
2022-04-19 CVE-2022-1187 Cross-site Scripting vulnerability in Andrewrminion WP Youtube Live
The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21.
network
low complexity
andrewrminion CWE-79
6.1