Description
Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| emarket-design | YouTube Showcase | ≤ 4.1.0 | — |
High · 7.1
CVE-2026-61995
EUVD-2026-112961GHSA-cwqq-2rcx-r8jw
WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack