CVE-2017-14142

Multiple cross-site scripting XSS vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 partnerId or 2 playerVersion parameter to server/adminconsole/web/tools/bigRedButton.php; the 3 partnerId, 4 playerVersion, 5 secret, 6 entryId, 7...

Kaltura server cross-site scripting vulnerability

Kaltura is an open source online video platform. kaltura server is one of the servers. A cross-site scripting vulnerability exists in the Kaltura server Lynx-12.11.0 version, which stems from the program failing to adequately filter user submissions to 'adminconsole/web/tools/SimpleJWPlayer.php',...