Mediaelement.js Security Vulnerabilities and Issues — Mediaelement.js CVE List | Vulners.com

Lucene search

K

MediaelementjsMediaelement.js

3 matches found

CVE•added 2016/05/22 1:59 a.m.•60 views

CVE-2016-4567

Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."

6.1CVSS5.9AI score0.04155EPSS

CVE•added 2014/02/05 3:10 p.m.•53 views

CVE-2013-1967

Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows remote attackers to inject arbitrary web script or HTML via the file parameter.

4.3CVSS5.9AI score0.00567EPSS

CVE•added 2023/01/30 9:15 p.m.•47 views

CVE-2022-4699

The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high-privile...

5.4CVSS5.4AI score0.00196EPSS