CVE-2013-1765: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 link or 2 playerready parameter...

JWPlayer 5.10 playerReady 跨站脚本漏洞

No description provided by source...