CERT24GHSA-8whc-2wmv-ww35 — Unauthenticated Stored DOM XSS in the AVideo YPTSocket PluginLoading data…
CERT24Threat Observatory
Period

GHSA-8whc-2wmv-ww35 — Unauthenticated Stored DOM XSS in the AVideo YPTSocket Plugin

A CWE-79 vulnerability in the AVideo YPTSocket plugin allows an unauthenticated remote attacker to deliver arbitrary JavaScript to administrators viewing the YPTSocket online-users debug panel.

← Back to intelligence

GHSA-8whc-2wmv-ww35 — Unauthenticated Stored DOM XSS in the AVideo YPTSocket Plugin

A CWE-79 vulnerability in the AVideo YPTSocket plugin allows an unauthenticated remote attacker to deliver arbitrary JavaScript to administrators viewing the YPTSocket online-users debug panel.