CVE-2021-25877: Youphptube

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.

Affected products

• Youphptube Youphptube: up to and including 10.0

Published 2021-11-01. Last modified 2026-07-09.