WordPress Webinar and Video Conference with Jitsi Meet Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Webinar and Video Conference with Jitsi Meet Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30437 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c0351b4d07f Credits LVT-tholv...

CVE-2024-23515

Cross-Site Request Forgery CSRF vulnerability in Cincopa Post Video Players.This issue affects Post Video Players: from n/a through 1.159...

CVE-2024-28853

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-23515

CVE-2024-23515 is a CSRF vulnerability in the WordPress plugin Cincopa Post Video Players (versions

CVE-2024-23515 WordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cincopa Post Video Players.This issue affects Post Video Players: from n/a through 1.159...

CVE-2024-28852

Ampache (web-based audio/video streaming and file manager) has multiple reflective XSS vulnerabilities affecting forms that use the rule variable. Exploitation could involve injecting payloads in queries (e.g., song, podcast) via the $rule parameter. The issue is fixed in version 6.3.1; upgrading...

CVE-2024-28853 Ampache Stored XSS

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-28853 Ampache Stored XSS

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-2781

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the videohtmltag attribute in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2781 Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the videohtmltag attribute in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2781 Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the videohtmltag attribute in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

SEEnergy SVR-116 安全漏洞

The SEEnergy SVR-116 is a video recorder device from SEEnergy. A security vulnerability exists in the SEEnergy SVR-116. An attacker can exploit the vulnerability to execute arbitrary operating system commands...

WordPress Plugin Elementor Website Builder Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Plugin FV Flowplayer Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-19916 · Cincopa · Cincopa Post Video Players

Name of the Vulnerable Software and Affected Versions: Cincopa Post Video Players versions 1.159 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Cincopa Post Video Players. This issue allows for malicious requests to be made on behalf of the user without their knowledge o...

YouTube ordered to reveal the identities of video viewers

Federal US authorities have asked Google for the names, addresses, telephone numbers, and user activity of accounts that watched certain YouTube videos, according to unsealed court documents Forbes has seen. Of those users that weren’t logged in when they watched those videos between January 1 an...

AI and Trust

Watch the Video on YouTube.com A 15-minute talk by Bruce Schneier...

WordPress FV Flowplayer Video Player Plugin <= 7.5.41.7212 is vulnerable to Cross Site Scripting (XSS)

Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.41.7212 Fixed in 7.5.44.7212 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22299 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8f54d6f5d663 Credits Rafie...

PT-2024-19320 · Unknown · Fv Flowplayer Video Player

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player versions n/a through 7.5.41.7212 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS. Recommendations: For...

Fedora: Security Advisory for baresip (FEDORA-2024-a15fe3f120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...