Medium severity4.8NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026
CVE-2021-24419
CVE-2021-24419
Description
The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:wp_youtube_lyte_project:wp_youtube_lyte:*:*:*:*:*:wordpress:*:*Range: <1.7.16
- WordPress/WP YouTube Lytedescription
- Range: <1.7.16
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.