Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ciprian Popescu | YouTube Playlist Player | ≤ 4.6.7 | — |
Medium · 6.5
CVE-2023-45049
EUVD-2023-49370GHSA-x529-3p36-rxh5
WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)
Published Oct 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack