VYPR

LiveChat

by Youphptube

CVEs (1)

  • CVE-2019-18662CriNov 2, 2019
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php is not properly sanitized (in getFromChat in plugin/LiveChat/Objects/LiveChatObj.php) before being used to construct a SQL query.…