CVE-2026-96895info

Zusammenfassung

von MITRE • 27.09.2026

The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before outputting them in an HTML attribute when rendering the block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Veröffentlichung

27.09.2026

Moderieren

wird geprüft

CPE

In Arbeit

CWE

CWE-79 (unbestätigt)

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-96895
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-96895
CVE Details	https://www.cvedetails.com/cve/CVE-2026-96895/

◂ Zurück Übersicht Weiter ▸

Interested in the pricing of exploits?

See the underground prices here!