WordPress Plugin Vulnerabilities

S3 Video <= 0.97 - VideoJS Cross Site Scripting

Description

The s3-video WordPress plugin was affected by a VideoJS Cross Site Scripting security vulnerability.

Affects Plugins

Plugin icon
s3-video
Fixed in 0.98

References

URL
https://seclists.org/fulldisclosure/2013/May/66

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
d5513ea5-e4cc-488e-90e3-337bb33de83a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-02-03
Title
Metform Elementor Contact Form Builder < 3.2.0 - Unauthenticated Stored XSS
Published
2024-10-01
Title
Ibtana – WordPress Website Builder < 1.2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Published
2024-08-16
Title
RegistrationMagic < 6.0.1.1 - Unauthenticated Stored Cross-Site Scripting
Published
2023-10-11
Title
Etsy Shop < 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2023-02-13
Title
Beautiful Cookie Consent Banner < 2.10.2 - Unauthenticated Stored XSS