32058 matches found
PT-2024-35313 · Unknown · Html5 Lyrics Karaoke Player
Name of the Vulnerable Software and Affected Versions: HTML5 Lyrics Karaoke Player versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...
CVE-2024-52473: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player html5-lyrics-karaoke-player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through = 2.4...
CVE-2024-51824
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...
CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...
CVE-2024-51824
CVE-2024-51824 describes a DOM-based XSS in the WordPress plugin Advanced Video Player with Analytics (vendors/author listed as Sony7596, MRSeanKumar25, MiracleWebSoft) due to improper input neutralization during page generation. Affected: the Advanced Video Player with Analytics; impact per sour...
CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...
CVE-2024-51854 WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...
CVE-2024-51854 WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...
CVE-2024-10268
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...
CVE-2024-10268
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...
CVE-2024-10268
CVE-2024-10268 – MP3 Audio Player by Sonaar (WordPress) Vulnerability type: Stored Cross-Site Scripting (XSS) via the shortcode sonaar_audioplayer. Root cause: insufficient input sanitization and output escaping on user-supplied shortcode attributes. Affected software: WordPress plugin MP3 Audio ...
PT-2024-34983
Name of the Vulnerable Software and Affected Versions Hola Free Video Player versions 1.3.9 and earlier Description The issue affects Hola Free Video Player, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS vulnerability. Users...
PT-2024-34951 · WordPress · Advanced Video Player With Analytics
Name of the Vulnerable Software and Affected Versions: Advanced Video Player with Analytics version 1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This is a DOM-Based XSS vulnerability. It affects the...
WordPress plugin Advanced Video Player with Analytics 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-10696
Name of the Vulnerable Software and Affected Versions VLC media player affected versions not specified Description The issue is related to a possible resource exhaustion due to improper input validation in the M3UParser.cpp file. This could lead to a denial of service, and no additional execution...
CVE-2024-51854: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...
CVE-2024-51824: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...
CVE-2024-10268: Improper Neutralization of Input During Web Page Generation
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...
WordPress plugin MP3 Audio Player 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2024-52348
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...