Cross-Site Scripting vulnerability in CorePlayer

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in CorePlayer. This is the same flash video player, which was used at online voting translations - today, 28.10.2012, on parliamentary elections in Ukraine and earlier this year on presidential elections in Russia. Concerni...

CorePlayer flash video player crossite scripting

Crossite scripting via callback parameter...

CorePlayer - 'callback' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56334/info CorePlayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

CorePlayer - callback Cross-Site Scripting

CorePlayer - callback Cross-Site Scripting source: https://www.securityfocus.com/bid/56334/info CorePlayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...