CVE-2025-54731: Emarket-Design YouTube Showcase

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Object Injection.This issue affects YouTube Showcase: from n/a through <= 3.5.1.

Affected products

• Emarket-Design YouTube Showcase: up to and including 3.5.1

Published 2025-08-28. Last modified 2026-09-26.