2 matches found
CVE-2013-7279: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in views/video-management/previewvideo.php in the S3 Video plugin before 0.983 for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter...
4.3CVSS6AI score0.01959EPSS
SaveExploits0References2
WordPress S3 Video Plugin <= 0.982 - XSS
Because of this vulnerability in views/video-management/previewvideo.php, the attackers can inject arbitrary web script or HTML via the "base" parameter. Solution Update the plugin...
4.3CVSS2.8AI score0.01959EPSS
SaveExploits0References1Affected Software1
20