CVE-2010-4277

Name of the Vulnerable Software and Affected Versions Embedded Video plugin version 4.1

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the content parameter to the "/wp-admin/post.php" API endpoint.

Recommendations For Embedded Video plugin version 4.1, consider disabling the vulnerable content parameter in the "/wp-admin/post.php" endpoint until a patch is available. Restrict access to the Embedded Video plugin to minimize the risk of exploitation.