DZS Video Gallery - deploy/preview_skin_overlay.swf logoLink Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by a deploy/previewskinoverlay.swf logoLink Parameter Reflected XSS security vulnerability...

DZS Video Gallery - preview_skin_rouge.swf logoLink Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by a previewskinrouge.swf logoLink Parameter Reflected XSS security vulnerability...

DZS Video Gallery - deploy/preview.swf logoLink Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by a deploy/preview.swf logoLink Parameter Reflected XSS security vulnerability...

PT-2014-5609

Name of the Vulnerable Software and Affected Versions Digital Zoom Studio DZS Video Gallery plugin for WordPress affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web...

CVE-2014-3923: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to 1 preview.swf, 2 previewskinrouge.swf, 3 previewallchars.swf, or 4 previewskinoverlay.swf...