Skip to content
Threat Feed
Subscribe

Tag

Pii-Leak

1 brief RSS
high advisory

Cross-Site Scripting Vulnerability in AVideo YPTSocket Plugin

An unauthenticated XSS vulnerability in the AVideo YPTSocket plugin allows attackers to execute arbitrary JavaScript in victim browsers via crafted websocket callback messages.

AVideo +3 web-application xss injection web-security access-control pii-leak account-takeover authentication-bypass +1
9t 1c updated