CVE-2025-23950

Stored XSS in EZPlayer (Said Shiripour) due to improper input neutralization during web page generation. Affected EZPlayer versions: n/a through 1.0.10. Exploitation context: network access with user interaction required; impact is client-side script execution affecting confidentiality, integrity...

WordPress plugin EZPlayer has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...