Description
In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.
Remediation
References
Related Vulnerabilities
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress SQL Injection (1.3.11.13)
SharePoint CVE-2019-1035 Vulnerability (CVE-2019-1035)
WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Request Forgery (2.9.43)
WordPress Plugin Contest Gallery-Photo Contest for WordPress Security Bypass (13.1.0.6)
WordPress Plugin PayPlus Payment Gateway SQL Injection (7.0.7)