A report has been released at The Register’s website about YouTube flaws.

A person named Christian Matthies has announced that there are more than 40 flaws on Google’s video-sharing website.

Many of the flaws concern XSS which stands for cross site scripting. Hackers can inject a code which looks like it’s hosted by the targeted website according to the article. As an additional note, both Google and another search engine, Yahoo!, had serious XSS errors in the past few weeks.

Matthies has emailed Google but he had not received a response about his claim. Therefore, he made a statement that he will disclose the flaws publicly. He said, “Taking that into account I’m going to have one last try and give you two weeks from now to contact me. If you don’t, I am obliged to disclose all vulnerabilities in public.”

This week, Google responded to his statement.

Source: The Register