Lucene search
K

8 matches found

CNNVD
CNNVD
added 2024/11/11 12:0 a.m.1 views

WordPress plugin ML Responsive Audio player with playlist Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin ML Responsive Audio player wi...

6.5CVSS5.9AI score0.00156EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/10 12:0 a.m.2 views

PT-2024-34716 · Unknown · Ml Responsive Audio Player With Playlist Shortcode

Name of the Vulnerable Software and Affected Versions: ML Responsive Audio player with playlist Shortcode versions 0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

6.5CVSS5.7AI score0.00156EPSS
Exploits0References6
Patchstack
Patchstack
added 2024/10/31 11:45 a.m.2 views

WordPress ML Responsive Audio plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ML Responsive Audio player with playlist Shortcode versions = 0.2...

6.5CVSS5.8AI score0.00156EPSS
Exploits0Affected Software1
OSV
OSV
added 2017/03/12 1:59 a.m.1 views

DEBIAN-CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

5.4CVSS5.2AI score0.02424EPSS
Exploits1References1
OSV
OSV
added 2017/03/12 1:59 a.m.0 views

UBUNTU-CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

5.4CVSS6.4AI score0.02424EPSS
Exploits1References7
OSV
OSV
added 2017/03/12 1:59 a.m.19 views

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

5.4CVSS5.9AI score
Exploits0References9
UbuntuCve
UbuntuCve
added 2017/03/12 1:59 a.m.24 views

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

5.4CVSS6.5AI score0.02424EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2017/03/12 1:0 a.m.22 views

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

5.4CVSS2.6AI score0.02424EPSS
Exploits1
Rows per page
Query Builder