Lucene search
PRIOn knowledge basePRION:CVE-2023-6485HistoryJan 01, 2024 - 3:15 p.m.
Cross site scripting
2024-01-0115:15:00
PRIOn knowledge base
www.prio-n.com
4
html5
video player
wordpress
plugin
stored
cross-site scripting
attack
sanitize
player
settings
capability
checks
authenticated users
subscribers
high privilege
admins
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins
| CPE | Name | Operator | Version |
|---|---|---|---|
| html5_video_player | lt | 2.5.19 |
Related
nvd
nvd
CVE-2023-6485
2024-01-01 15:15:43
wpexploit
wpexploit
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
2023-12-08 00:00:00
cvelist
cvelist
CVE-2023-6485 Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
2024-01-01 14:18:55
cve
cve
CVE-2023-6485
2024-01-01 15:15:43
wpvulndb
wpvulndb
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
2023-12-08 00:00:00
wordfence
wordfence