Lucene search
+L

106 matches found

Vulnrichment
Vulnrichment
•added 2025/05/16 3:45 p.m.•15 views

CVE-2025-32307 WordPress Chameleon HTML5 Audio Player With/Without Playlist <= 3.5.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist allows SQL Injection. This issue affects Chameleon HTML5 Audio Player With/Without Playlist: from n/a through 3.5.6...

8.5CVSS7.6AI score0.00335EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•23 views

WordPress plugin Chameleon HTML5 Audio Player With/Without Playlist SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS9AI score0.00335EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•6 views

CVE-2025-32287: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows SQL Injection.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.7...

8.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•7 views

CVE-2025-32307: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist lbg-audio1-html5 allows SQL Injection.This issue affects Chameleon HTML5 Audio Player With/Without Playlist: from n/a through = 3.5.6...

8.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 10:51 p.m.•31 views

CVE-2025-39524

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through = 2.2.28...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/16 2:07 p.m.•18 views

WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Html5 Audio Player versions = 2.2.28...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/04/16 1:15 p.m.•17 views

CVE-2025-39524

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through = 2.2.28...

6.5CVSS0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/16 12:45 p.m.•35 views

CVE-2025-39524 WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through = 2.2.28...

6.5CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:45 p.m.•20 views

CVE-2025-39524 WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through = 2.2.28...

6.5CVSS8.6AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 12:45 p.m.•65 views

CVE-2025-39524

CVE-2025-39524 is a stored XSS vulnerability in the WordPress Html5 Audio Player plugin. The issue arises from improper neutralization of script-related HTML tags in the plugin and affects Html5 Audio Player versions up to and including 2.2.28. If exploited, an attacker could inject scripted cont...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•4 views

PT-2025-16635

Name of the Vulnerable Software and Affected Versions bPlugins Html5 Audio Player versions 2.2.28 and earlier Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for Stored XSS attacks. This is a Basic XSS vulnerability...

6.5CVSS5.7AI score0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

WordPress plugin Html5 Audio Player 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exis...

6.5CVSS6.7AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•4 views

CVE-2025-39524: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through = 2.2.28...

6.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/22 9:15 a.m.•22 views

CVE-2024-37445

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.2.23...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/22 9:15 a.m.•57 views

CVE-2024-37445

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.2.23...

6.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/22 8:14 a.m.•26 views

CVE-2024-37445 WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.2.23...

6.5CVSS6.8AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/22 8:14 a.m.•83 views

CVE-2024-37445

CVE-2024-37445 is a stored XSS vulnerability in the WordPress plugin WordPress HTML5 Audio Player (bPlugins Html5 Audio Player), affected up to version 2.2.23. The issue arises from improper neutralization during web page generation, enabling stored cross-site scripting. The Wordfence/WordPress v...

6.5CVSS6.5AI score0.00261EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•22 views

PT-2024-27559 · Bplugins · Bplugins Html5 Audio Player

Name of the Vulnerable Software and Affected Versions: bPlugins Html5 Audio Player versions 2.2.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

6.5CVSS6.3AI score0.00261EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•6 views

CVE-2024-37445: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.2.23...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/06/28 2:21 p.m.•22 views

WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Html5 Audio Player versions = 2.2.23...

6.5CVSS6.1AI score0.00261EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder