PT-2024-36389 · WordPress · Panda Video

Name of the Vulnerable Software and Affected Versions: Panda Video plugin for WordPress versions up to, and including, 1.4.0 Description: The issue is related to Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows authenticated...

CVE-2024-23515 WordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cincopa Post Video Players.This issue affects Post Video Players: from n/a through 1.159...

SUSE: Security Advisory (SUSE-SU-2024:0100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:0100-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - ZDI-CAN-22300: Fixed a buffer overflow in the AV1 video plugin bsc1218534...

PT-2024-40978 · Unknown · Gstreamer-Plugins-Bad

Name of the Vulnerable Software and Affected Versions: gstreamer-plugins-bad affected versions not specified Description: A buffer overflow issue was found in the AV1 video plugin of gstreamer-plugins-bad. This issue can be exploited, but no specific details about the estimated number of...

SUSE-SU-2024:0089-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - ZDI-CAN-22300: Fixed a buffer overflow in the AV1 video plugin bsc1218534...

PT-2024-40977 · Unknown · Gstreamer-Plugins-Bad

Name of the Vulnerable Software and Affected Versions: gstreamer-plugins-bad affected versions not specified Description: A buffer overflow issue was found in the AV1 video plugin. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

WordPress Video PopUp Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Video PopUp Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4962 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID de09c56436ca Credits István Márton Required...

PT-2023-10288 · WordPress · Video Playlist/Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Video Playlist and Gallery Plugin versions up to 1.136 Description: A problem was found in the Video Playlist and Gallery Plugin. It affects some unknown functionality of the file wp-media-cincopa.php. The issue leads to cross-site request...

CVE-2022-1392

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

CVE-2022-25613 WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability in FV Flowplayer Video Player WordPress plugin versions = 7.5.18.727 via &fvwpflowplayerfieldsplash parameter...

Embed Youtube Video <= 1.0 - Authenticated SQL Injection

The editid GET parameter of the plugin is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. PoC GET /wp-admin/admin.php?page=embed-youtube-video-add=-6425+UNION+ALL+SELECT+NULL%2Cuser%28%29%2CNULL%2CNULL%2CNULL-- HTTP/1.1 Cache-Control: max-age=0...

WordPress s3bubble-amazon-s3-html-5-video-with-adverts plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. s3bubble-amazon-s3-html-5-video-with-adverts is a video player plugin for streaming Amazon S3 used in it. A path traversal vulnerabili...

PT-2019-13844 · Fv Flowplayer · Fv Flowplayer Video Player

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player plugin versions prior to 7.3.14.727 Description: The issue allows email subscription XSS. Recommendations: For versions prior to 7.3.14.727, update to version 7.3.14.727 or later to resolve the issue...

gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder

An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the use...

Wordpress s3-video plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. s3-video is one of the video plugin. A cross-site scripting vulnerability exists in version 0.983 of the...

WordPress Advanced Video Plugin 1.0 本地文件包含漏洞

No description provided by source...

blcm.org XSS vulnerability

Vulnerable URL: http://blcm.org/site/wp-content/plugins/simple-flash-video/video.php?filename=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

simoandreu.com XSS vulnerability

Vulnerable URL: http://www.simoandreu.com/wp-content/plugins/simple-flash-video/video.php?filename=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

WordPress S3 Video Plugin <= 0.983 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...