CVE-2025-13849 | Cool YT Player Plugin up to 1.0 on WordPress Shortcode videoid cross site scripting

A vulnerability was found in Cool YT Player Plugin up to 1.0 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation of the argument videoid results in cross site scripting.

This vulnerability is known as CVE-2025-13849. It is possible to launch the attack remotely. No exploit is available.