CVE-2025-13217 | Ultimate Member Plugin up to 2.11.0 on WordPress um_profile_field_filter_hook__youtube_video Value cross site scripting

A vulnerability marked as problematic has been reported in Ultimate Member Plugin up to 2.11.0 on WordPress. Affected by this vulnerability is the function um_profile_field_filter_hook__youtube_video. Performing manipulation of the argument Value results in cross site scripting.

This vulnerability was named CVE-2025-13217. The attack may be initiated remotely. There is no available exploit.