Description
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Unscored
CVE-2021-25876
EUVD-2021-12756GHSA-v66q-3xcx-65j2
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote at…
Published Nov 1, 2021 · Updated Jul 9, 2026 · Assigned by mitre