Youtube Showcase
Monthly
Stored cross-site scripting in Emarket-design's YouTube Showcase WordPress plugin up to version 3.5.1 allows authenticated attackers to inject malicious scripts that execute in the context of other users' browsers. No active exploitation or public exploit code has been reported, and EPSS indicates a low 0.03% probability of exploitation over the next 30 days. The vulnerability carries a medium CVSS 6.5 score and requires low-privilege access and user interaction.
Stored cross-site scripting in Emarket-design's YouTube Showcase WordPress plugin up to version 3.5.1 allows authenticated attackers to inject malicious scripts that execute in the context of other users' browsers. No active exploitation or public exploit code has been reported, and EPSS indicates a low 0.03% probability of exploitation over the next 30 days. The vulnerability carries a medium CVSS 6.5 score and requires low-privilege access and user interaction.