Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.01017·Published 2019-07-05·Fixed in 1.9.9CWE-352