Beveiligingsadvies

CVE-2025-4955

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-18 06:00:02

Laatst bijgewerkt 2025-06-18 18:35:58

Toegewezen door WPScan

CVSS-score 4.7

Status PUBLISHED

Beschrijving

The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗