CVE-2023-45049: WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.7 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-45049?
CVE-2023-45049 is an Authentication (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in the Ciprian Popescu YouTube Playlist Player plugin <= 4.6.7 versions.
How severe is CVE-2023-45049?
CVE-2023-45049 has a severity level of medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2023-45049?
CVE-2023-45049 affects versions <= 4.6.7 of the Getbutterfly YouTube Playlist Player plugin for WordPress.
What is the Common Weakness Enumeration (CWE) of CVE-2023-45049?
CVE-2023-45049 is classified under CWE-79, which is the category for Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting).
Where can I find more information about CVE-2023-45049?
You can find more information about CVE-2023-45049 on the Patchstack website: [CVE-2023-45049 Patchstack](https://patchstack.com/database/vulnerability/youtube-playlist-player/wordpress-youtube-playlist-player-plugin-4-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve)