CVE-2021-25878: Youphptube

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.

Affected products

• Youphptube Youphptube: up to and including 10.0

Published 2021-11-01. Last modified 2026-07-09.