My Youtube Channel Project Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/my-youtube-channel-project/ Wed, 22 Feb 2023 14:02:14 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png My Youtube Channel Project Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/my-youtube-channel-project/ 32 32 CVE-2023-0446 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0446/ Wed, 22 Feb 2023 14:02:14 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0446 The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever […]

The post CVE-2023-0446 appeared first on CVE Vulnerability.

]]> The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The post CVE-2023-0446 appeared first on CVE Vulnerability.

]]> CVE-2023-0447 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0447/ Wed, 22 Feb 2023 14:02:14 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0447 The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear the plugin’s cache.

The post CVE-2023-0447 appeared first on CVE Vulnerability.

]]> The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear the plugin’s cache.

The post CVE-2023-0447 appeared first on CVE Vulnerability.

]]>