Lucene search
+L

84 matches found

OSV
OSV
added 2023/12/15 3:15 p.m.4 views

CVE-2023-49178

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr. Hdwplayer HDW Player Plugin Video Player & Video Gallery allows Reflected XSS.This issue affects HDW Player Plugin Video Player & Video Gallery: from n/a through 5.0...

6.1CVSS7.3AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/15 2:40 p.m.75 views

CVE-2023-49178

CVE-2023-49178 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin HDW Player Plugin (Video Player & Video Gallery) . The issue is caused by improper neutralization of input during web page generation, enabling a Reflected XSS. Affected software: HDW Player Plugin (Video ...

7.1CVSS7.1AI score0.00403EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 2:40 p.m.31 views

CVE-2023-49178 WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr. Hdwplayer HDW Player Plugin Video Player & Video Gallery allows Reflected XSS.This issue affects HDW Player Plugin Video Player & Video Gallery: from n/a through 5.0...

7.1CVSS7.1AI score0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/11/29 12:0 a.m.18 views

WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

Software HDW Player Plugin Video Player & Video Gallery Type Plugin Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-49178 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 27d63d522c9...

7.1CVSS5.6AI score0.00403EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder