CVE-2024-54421

Cross-Site Request Forgery CSRF vulnerability in SanjayNegi Floating Video Player floating-player allows Stored XSS.This issue affects Floating Video Player: from n/a through = 1.0...

CVE-2024-54421

creationtimestamp| type| source ---|---|--- 2024-12-16 16:51:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113663533019821343...

CVE-2024-54421 WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in SanjayNegi Floating Video Player floating-player allows Stored XSS.This issue affects Floating Video Player: from n/a through = 1.0...

CVE-2024-54421

CVE-2024-54421 is a CSRF-to-Stored XSS vulnerability in Floating Video Player (plugin: Floating Video Player, version up to 1.0). The Red Hat and Wordfence entries confirm the issue, describing an unauthenticated CSRF path that enables stored XSS. The Wordfence vuln details indicate patch status ...