CVE-2024-51854

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in holanetworks Hola Free Video Player hola-free-video-player allows DOM-Based XSS.This issue affects Hola Free Video Player: from n/a through = 1.3.9...

CVE-2024-51854

CVE-2024-51854 describes a DOM-based XSS in the WordPress plugin Hola Free Video Player (versions up to 1.3.9) caused by improper neutralization of input during web page generation. The vulnerability could allow an attacker to inject and execute script in a victim’s browser when the affected plug...