Reflected Cross-Site Scripting Vulnerability in WordPress WP YouTube Live Plugin (up to version 1.7.21) via POST Data in ~/inc/admin.php

CVE-2022-1187 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21.

Learn more about our Wordpress Pen Testing.