Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2024-33931
Disclosure Date: May 03, 2024 (last updated May 13, 2024)
Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3.
0
Attacker Value
Unknown
CVE-2012-3351
Disclosure Date: February 20, 2020 (last updated February 21, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.
0
Attacker Value
Unknown
CVE-2014-4030
Disclosure Date: June 25, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.
0
Attacker Value
Unknown
CVE-2012-2904
Disclosure Date: May 21, 2012 (last updated October 04, 2023)
player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter.
0
