Malicious code in videojs-wistia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 689d1a34d7095f6a582f40f279911a00c45a371e67dae5812680e2d47c76af06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6918 Malicious code in videojs-wistia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 689d1a34d7095f6a582f40f279911a00c45a371e67dae5812680e2d47c76af06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in videojs-vtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61d79fbfbb649e094b947834792631ccad06d06b4674a76ad724e136e1c3835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6917 Malicious code in videojs-vtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61d79fbfbb649e094b947834792631ccad06d06b4674a76ad724e136e1c3835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-site Scripting(XSS)

videojs is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via rc attribute of track tag...

EZSA-2020-003 XSS in DemoBundle/ezdemo bundled VideoJS

More info at https://ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs...

EZSA-2020-003 XSS in DemoBundle/ezdemo bundled VideoJS

More info at https://ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs...

X (Formerly Twitter): XSS platform.twitter.com | video-js metadata

https://platform.twitter.com/video/video-js.1e43b81a2f30220a16fd493aaf072451.swf VideoJS does not escape metadata passed to JavaScript via ExternalInterface. Since VideoJS does not load a required policy file to read metadata from mp3s loaded from an external server via http we need to use rtmp...

Covert Videopress - VideoJS Cross-Site Scripting

The covertvideopress WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

Photolio - VideoJS Cross-Site Scripting

The photolio WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

Crius - VideoJS Cross-Site Scripting

The crius WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

I Love It - VideoJS Cross-Site Scripting

The i-love-it WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

Source - VideoJS Cross-Site Scripting

The source WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

Smart Start - VideoJS Cross-Site Scripting

The smartstart WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

VideoJS - Cross-Site Scripting (XSS)

...

S3 Video <= 0.97 - VideoJS Cross Site Scripting

The s3-video WordPress plugin was affected by a VideoJS Cross Site Scripting security vulnerability...

Vulnerabilities in multiple plugins for WordPress with VideoJS

Hello 3APA3A! These are Cross-Site Scripting vulnerabilities in multiple plugins for WordPress with VideoJS. Earlier I've wrote about vulnerabilities in VideoJS http://seclists.org/fulldisclosure/2013/May/21. This is popular video and audio player, which is used at hundreds thousands of web sites...

XSS and FPD vulnerabilities in I Love It New theme for WordPress

Hello 3APA3A! These are Cross-Site Scripting and Full path disclosure vulnerabilities in I Love It New theme for WordPress. This is commercial premium theme. Earlier I've wrote about vulnerabilities in VideoJS http://seclists.org/fulldisclosure/2013/May/21 and in multiple web applications...

Multiple vulnerabilities in multiple themes for WordPress with VideoJS

Hello 3APA3A! These are Cross-Site Scripting and Full path disclosure vulnerabilities in multiple themes for WordPress with VideoJS. Earlier I've wrote about vulnerabilities in VideoJS http://seclists.org/fulldisclosure/2013/May/21. This is popular video and audio player, which is used at hundred...

WordPress Video JS Cross Site Scripting Vulnerability

Various WordPress plugins that embed video-js.swf suffer from cross site scripting vulnerabilities. These include Video Embed and Thumbnail Generator, External "Video for Everybody", 1player, S3 Video and EasySqueezePage. These are Cross-Site Scripting vulnerabilities in multiple plugins for...