Read the docs

Wp Youtube Lyte Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Youtube Lyte Project records in CISA KEV

No Wp Youtube Lyte Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Youtube Lyte 1 record LOW

Records

1 record

TI-2021-06710 CVE-2021-24419 · GHSA-jxff-rp47-w5rf

WP YouTube Lyte < 1.7.16 - Authenticated Stored XSS

Priority LOW 23

The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users to set XSS payload o…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00626 Published 2021-07-12 Fixed in 1.7.16 CWE-79
Open these records in search →