Flowplayer

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-7342 Mar 24, 14:20 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers to inject arbitrary web script or HTML via the callback. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Flowplayer Html5 Flowplayer

NVD GitHub VulDB

CVSS 2.0

4.3

EPSS

0.3%

CVE-2013-7343 Mar 24, 14:20 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Flowplayer Html5 Flowplayer

NVD GitHub VulDB

CVSS 2.0

4.3

EPSS

0.3%

CVE-2013-7341 Mar 24, 14:20 PHP MEDIUM PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Moodle Flowplayer Flash Flowplayer

NVD GitHub VulDB

CVSS 2.0

4.3

EPSS

0.3%

CVE-2013-7342

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Flowplayer Html5 Flowplayer

NVD GitHub VulDB

CVE-2013-7343

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Flowplayer Html5 Flowplayer

NVD GitHub VulDB

CVE-2013-7341 PHP

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Moodle Flowplayer Flash +1

NVD GitHub VulDB