Longtailvideo

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-4030 Jun 25, 20:55 MEDIUM POC PATCH This Month

Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress CSRF Wordpress Plugin Jw Player For Flash Html5 Video Plugin +1

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.3%

CVE-2012-2904 May 21, 18:55 MEDIUM POC This Month

player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Jw Player Longtailvideo

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.9%

CVE-2014-4030

EPSS 0% CVSS 6.8

MEDIUM POC PATCH This Month

PHP WordPress CSRF +3

NVD Exploit-DB

CVE-2012-2904

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS Jw Player Longtailvideo

NVD Exploit-DB