Vulnerabilities > WP Youtube Lyte Project

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-12	CVE-2021-24419	Cross-site Scripting vulnerability in WP Youtube Lyte Project WP Youtube Lyte The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues. network low complexity wp-youtube-lyte-project CWE-79	4.8

Vulnerabilities > WP Youtube Lyte Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"WP Youtube Lyte Project"}]}