CVE-2022-4833 | THREATINT

Assigner	WPScan
Reserved	2022-12-29
Published	2023-02-06
Updated	2024-08-03

Description

The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Product status

Default status

unaffected

Any version before 1.2.3

affected

Credits

Lana Codes finder

WPScan coordinator

References

https://wpscan.com/vulnerability/35ba38cf-4f23-4344-8de3-cf3004ebf84c exploit vdb-entry technical-description

cve.org CVE-2022-4833

nvd.nist.gov CVE-2022-4833

Download JSON

https://cve.threatint.com/CVE/CVE-2022-4833

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.