CVE-2013-2023

The CVE-2013-2023 entry documents a cross-site scripting (XSS) vulnerability in the Flash SWF component jplayer.swf (jPlayer) affecting actionscript/Jplayer.as. Affected version is before 2.3.1. The root cause is inadequate input handling (unspecified vectors; mentions incomplete blacklists), all...

CVE-2013-1942

CVE-2013-1942 describes multiple XSS vulnerabilities in actionscript/Jplayer.as (jplayer.swf) of the jPlayer Flash SWF component. The flaws allow remote attackers to inject arbitrary script or HTML via the (1) jQuery or (2) id parameters, demonstrated by document.write in the jQuery parameter. Af...

CVE-2013-2022

CVE-2013-2022 refers to multiple XSS vulnerabilities in the Flash SWF component jplayer.swf (jPlayer) within actionscript/Jplayer.as. Affected are jPlayer versions before 2.2.23, where remote attackers could inject arbitrary script or HTML via the (1) jQuery or (2) id parameters in the jplayer.sw...