Lucene search
+L

32058 matches found

Positive Technologies
Positive Technologies
•added 2024/11/20 12:00 a.m.•23 views

PT-2024-35313 · Unknown · Html5 Lyrics Karaoke Player

Name of the Vulnerable Software and Affected Versions: HTML5 Lyrics Karaoke Player versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

7.1CVSS8.9AI score0.00271EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•4 views

CVE-2024-52473: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player html5-lyrics-karaoke-player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through = 2.4...

7.1CVSS5.8AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•22 views

CVE-2024-51824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

6.5CVSS0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•10 views

CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

6.5CVSS7.2AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•59 views

CVE-2024-51824

CVE-2024-51824 describes a DOM-based XSS in the WordPress plugin Advanced Video Player with Analytics (vendors/author listed as Sony7596, MRSeanKumar25, MiracleWebSoft) due to improper input neutralization during page generation. Affected: the Advanced Video Player with Analytics; impact per sour...

6.5CVSS7.2AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•29 views

CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

6.5CVSS0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•26 views

CVE-2024-51854 WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...

6.5CVSS0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•8 views

CVE-2024-51854 WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...

6.5CVSS8.6AI score0.0039EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/19 8:15 a.m.•17 views

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

5.4CVSS7.4AI score0.00342EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/19 8:15 a.m.•27 views

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

6.4CVSS0.00342EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/19 7:35 a.m.•77 views

CVE-2024-10268

CVE-2024-10268 – MP3 Audio Player by Sonaar (WordPress) Vulnerability type: Stored Cross-Site Scripting (XSS) via the shortcode sonaar_audioplayer. Root cause: insufficient input sanitization and output escaping on user-supplied shortcode attributes. Affected software: WordPress plugin MP3 Audio ...

6.4CVSS5.7AI score0.00342EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•6 views

PT-2024-34983

Name of the Vulnerable Software and Affected Versions Hola Free Video Player versions 1.3.9 and earlier Description The issue affects Hola Free Video Player, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a high-severity XSS vulnerability. Users...

6.5CVSS0.0039EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•18 views

PT-2024-34951 · WordPress · Advanced Video Player With Analytics

Name of the Vulnerable Software and Affected Versions: Advanced Video Player with Analytics version 1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This is a DOM-Based XSS vulnerability. It affects the...

6.5CVSS6.2AI score0.00377EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•21 views

WordPress plugin Advanced Video Player with Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.2AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•6 views

PT-2024-10696

Name of the Vulnerable Software and Affected Versions VLC media player affected versions not specified Description The issue is related to a possible resource exhaustion due to improper input validation in the M3UParser.cpp file. This could lead to a denial of service, and no additional execution...

6.5CVSS5.9AI score0.00181EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•5 views

CVE-2024-51854: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...

6.5CVSS5.8AI score0.0039EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•7 views

CVE-2024-51824: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•7 views

CVE-2024-10268: Improper Neutralization of Input During Web Page Generation

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...

6.4CVSS6AI score0.00342EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•19 views

WordPress plugin MP3 Audio Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS7.5AI score0.00342EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/18 10:15 p.m.•41 views

CVE-2024-52348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

6.5CVSS0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder