Description
Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alex | Featured Video Plus | ≤ 2.3.3 | — |
Medium · 6.5
CVE-2026-66637
EUVD-2026-60922GHSA-6qf7-92v6-pjj8
WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack