← Back

Tarteaucitron.io

tarteaucitron.io

Vendor: Amauri • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-4955
1Amauri
1Tarteaucitron.io
Jun 17, 2026
Jun 18, 2025
N/A· v4
4.7 MEDIUM· v3
N/A· v2
The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stor...Show more
The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.Show less