Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7825
HistoryNov 16, 2018 - 7:06 a.m.

Cross-Site Scripting (XSS)

2018-11-1607:06:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

jPlayer is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the jQuery and id parameters in the Flash SWF component. This CVE is different from CVE-2013-2022 and CVE-2013-2023

CPENameOperatorVersion
jplayerle2.2.0
jplayer-classidle2.2.0

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N