CVE-2017-6392

Kaltura Server Lynx-12.11.0 and earlier are affected by CVE-2017-6392 due to insufficient filtration of user-supplied data passed to the XmlJWPlayer.php URL, enabling arbitrary HTML/script execution in a browser (XSS). OpenVAS CNVD entries corroborate multiple XSS issues for Lynx-12.11.0 and earl...