TI-2025-02207 CVE-2025-2537 · GHSA-m5fw-x833-hv4q
Cross-site scripting in wpdevart YouTube Embed, Playlist and Popup by WpDevArt
Priority LOW 28
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox JavaScript library (version 3.1) in various versions due to insufficient input sanitization and output escapi…