CVE-2013-1464

Vulnerability summary (CVE-2013-1464): Cross-site scripting in the WordPress Audio Player plugin’s assets/player.swf, prior to version 2.0.4.6. The flaw allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. Impact is XSS on pages rendering the audio player; ex...