Malicious code in kaltura-player-js (npm)

The package communicates with a domain associated with malicious activity...

PT-2025-7751 · Playerjs · Playerjs

Name of the Vulnerable Software and Affected Versions: PlayerJS versions n/a through 2.23 Description: The issue affects PlayerJS, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables cross-site scripting. Recommendations: For versions n/a throug...