Embedded Video <= 4.1 - Cross-Site Scripting
highCross-site scripting (XSS) vulnerability in embedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.
- CVSS:
- 7.1
- Affected:
- up to 4.1
- Fix:
- No patched version reported
- Disclosed:
- Dec 17, 2010