Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2021-47750

YouPHPTube <= 7.8 - Cross-Site Scripting

Description

YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the redirectUri parameter in the signup page. Attackers can craft special signup URLs with embedded script tags to execute arbitrary JavaScript in victims' browsers when they access the signup page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

YouPHPTube YouPHPTube

  • 0 to ≤ 7.8affected

References