Reflected Cross-site Scripting Vulnerability in NotFound Youtube Video Grid Plugin
CVE-2025-23634
7.1HIGH
What is CVE-2025-23634?
A Cross-site Scripting (XSS) vulnerability exists in the NotFound Youtube Video Grid plugin, allowing attackers to inject malicious scripts via user input that is improperly handled during web page generation. This issue affects all versions up to 1.9, potentially compromising the security of web applications that utilize this plugin. Action should be taken to mitigate exposure to this vulnerability.
Affected Version(s)
Youtube Video Grid <= 1.9