WordPress Plugin Vulnerabilities

MP3-jPlayer 1.8.3 - jPlayer.swf Cross-Site Scripting (XSS)

Description

The MP3-jPlayer WordPress plugin was affected by a jPlayer.swf Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
mp3-jplayer
Fixed in 1.8.4

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
9c49afcf-1428-453d-95e6-5a47d8f5f486

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-07-05 (about 10 years ago)

Other

Published
Title
Published
2025-01-03
Title
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-12-30
Title
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 9.11.1 - Reflected Cross-Site Scripting
Published
2021-08-13
Title
Scribble Maps <= 1.2 - Reflected Cross-Site Scripting
Published
2015-08-11
Title
AddThis Sharing Buttons <= 5.0.12 - Authenticated Cross-Site Scripting (XSS)
Published
2026-01-26
Title
Email Inquiry & Cart Options for WooCommerce <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting