CVE-2007-3773: Generic YouTube Clone Script

High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators.

Affected products

Published 2007-07-15. Last modified 2026-06-16.