CVE-2022-36373

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...

CVE-2022-36373

CVE-2022-36373 concerns the WordPress MP3 jPlayer plugin (versions <= 2.7.3). The NVD entry reports multiple CSRF vulnerabilities with a base CVSS v3.1 score of 8.8 (HIGH) and an attack vector of NETWORK, requiring user interaction and no privileges. Connected sources consistently describe CSR...

WordPress MP3 jPlayer Plugin <= 1.8.3 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in jPlayer.swf. Solution Upgrade this plugin...

WordPress MP3 jPlayer Plugin <= 1.8.3 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in jPlayer.swf. Solution Upgrade this plugin...