CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High
EPSS
Percentile
18.0%
Software
Agile Video Player Lite
Type
Plugin
Vulnerable versions
<= 1.0
Fixed in
N/A
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2024-49636
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
267bc8c567b6
Credits
João Pedro Soares de Alcântara (Kinorth)
Required privilege
Unauthenticated
Published
21 October, 2024
Expand full details Have additional information or questions about this entry? Let us know.
We advise to mitigate or resolve the vulnerability immediately.
Vendor | Product | Version | CPE |
---|---|---|---|
- | agile_video_player_lite | * | cpe:2.3:a:-:agile_video_player_lite:*:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High
EPSS
Percentile
18.0%