PT-2024-40352 · Ez Systems · Ez Publish Legacy +1

Name of the Vulnerable Software and Affected Versions: VideoJS versions prior to the version that fixes the XSS vulnerability eZ Publish Platform 5.4 eZ Publish Legacy 5.4 Description: The issue is related to an XSS vulnerability in the Flash-based video player of VideoJS, which is bundled in...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (2.5.0), org.apache.struts:struts2-assembly (>=2.5, <=2.5.2) +3 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.5, <=2.5.2)

org.apache.struts:struts2-convention-plugin MAVEN version =2.5, =2.5, =2.5, =2.5, =2.5, =2.5.2 Source cves: CVE-2016-6795 Source advisory: MEND:CVE-2016-6795...