CVE-2014-4534

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving NL

Meerdere cross-site scripting (XSS) kwetsbaarheden in videoplayer/autoplay.php in de HTML5 Video Player met Playlist plugin 2.4.0 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het (1) thema of (2) playlistmod parameter.

Origineel (Engels) tonen

Multiple cross-site scripting (XSS) vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) theme or (2) playlistmod parameter.

Vendors

Html5 Video Player With Playlist Plugin Project Wordpress

Affected products

Html5 Video Player With Playlist Plugin Wordpress

References

codevigilant.com