CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25878

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2021-25878

Youphptube » Youphptube » Version: N/A

cpe:2.3:a:youphptube:youphptube:-
Youphptube » Youphptube » Version: 10.0

cpe:2.3:a:youphptube:youphptube:10.0
Youphptube » Youphptube » Version: 2.2

cpe:2.3:a:youphptube:youphptube:2.2
Youphptube » Youphptube » Version: 2.4

cpe:2.3:a:youphptube:youphptube:2.4
Youphptube » Youphptube » Version: 2.7

cpe:2.3:a:youphptube:youphptube:2.7
Youphptube » Youphptube » Version: 3.4

cpe:2.3:a:youphptube:youphptube:3.4
Youphptube » Youphptube » Version: 3.4.1

cpe:2.3:a:youphptube:youphptube:3.4.1
Youphptube » Youphptube » Version: 4.0

cpe:2.3:a:youphptube:youphptube:4.0
Youphptube » Youphptube » Version: 4.0.1

cpe:2.3:a:youphptube:youphptube:4.0.1
Youphptube » Youphptube » Version: 4.0.2

cpe:2.3:a:youphptube:youphptube:4.0.2
Youphptube » Youphptube » Version: 5.0

cpe:2.3:a:youphptube:youphptube:5.0
Youphptube » Youphptube » Version: 6.5

cpe:2.3:a:youphptube:youphptube:6.5
Youphptube » Youphptube » Version: 7.2

cpe:2.3:a:youphptube:youphptube:7.2
Youphptube » Youphptube » Version: 7.3

cpe:2.3:a:youphptube:youphptube:7.3
Youphptube » Youphptube » Version: 7.4

cpe:2.3:a:youphptube:youphptube:7.4
Youphptube » Youphptube » Version: 7.6

cpe:2.3:a:youphptube:youphptube:7.6
Youphptube » Youphptube » Version: 7.7

cpe:2.3:a:youphptube:youphptube:7.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25878

Products

Pricing

Contact Us