1216 matches found
CVE-2023-6485 Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against hi...
CVE-2023-6485
The CVE-2023-6485 entry concerns the Html5 Video Player WordPress plugin, affected in versions before 2.5.19. Root cause: the plugin does not sufficiently sanitize/escape some player settings and lacks proper capability checks. This enables Stored Cross-Site Scripting by authenticated users (e.g....
WordPress Plugin Html5 Video Player Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-14965 · WordPress · Html5 Video Player
Name of the Vulnerable Software and Affected Versions: Html5 Video Player WordPress plugin versions prior to 2.5.19 Description: The issue arises from the Html5 Video Player WordPress plugin not sanitizing and escaping some of its player settings, combined with missing capability checks around th...
CVE-2023-49172
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainCert BrainCert – HTML5 Virtual Classroom allows Reflected XSS.This issue affects BrainCert – HTML5 Virtual Classroom: from n/a through 1.30...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainCert BrainCert – HTML5 Virtual Classroom allows Reflected XSS.This issue affects BrainCert – HTML5 Virtual Classroom: from n/a through 1.30...
CVE-2023-49172 WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainCert BrainCert – HTML5 Virtual Classroom allows Reflected XSS.This issue affects BrainCert – HTML5 Virtual Classroom: from n/a through 1.30...
CVE-2023-49172 WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainCert BrainCert – HTML5 Virtual Classroom allows Reflected XSS.This issue affects BrainCert – HTML5 Virtual Classroom: from n/a through 1.30...
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
Description The plugin does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins...
BrainCert – HTML5 Virtual Classroom <= 2.0 - Reflected Cross-Site Scripting
Description The BrainCert – HTML5 Virtual Classroom plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
Description The plugin does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins...
How to Configure HTML5 storefront ica to disable microphone and multi-monitor access prompts
+ Getting prompt while logging on to HTML 5 enabled storefront page, as their end users do not use multimonitor, camera, microphoneThe users are HTML5 Users: ++ ++ ++ Changed configuration.js file in storefront server under the location:C:\Program files\Citrix\Receiver storefront\HTML5 Client...
WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software BrainCert – HTML5 Virtual Classroom Type Plugin Vulnerable versions = 2.0 Fixed in 2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49172 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 337638b9c86e Credits Khalid Yusuf...
WordPress HTML5 Maps Plugin < 1.6.5.7 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fla-shop:html5maps"; if description...
Ubuntu: Security Advisory (USN-6483-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Error launching application in DAAS "The resource is unavailable currently"
All applications in a particular Delivery Group\Catalog fail to launch . Applications in other Delivery Groups have no issue launching . With CWA the error seen is "The resource is unavailable currently" With HTML5 client this error is seen "ICA retrieved successfully, connecting..."...
How to customize the toolbar of citrix workspace app for HTML5
How to customize the toolbar of Citrix workspace app for HTML5...
Unable to launch HTML5 sessions via gateway when using Secure Storefront IIS
Unable to launch a published desktop session using Citrix Workspace app for HTML5 when connection is via NetScaler. Desktop launches fine when not going through HTML5. When launching directly from Storefront, bypassing netscaler, HTML5 session launches without any issues. When launching HTML5...
HTML5 Maps < 1.7.1.5 - Arbitrary Settings Update via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...