S3player

s3player

Vendor: S3bubble • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-13865

1S3bubble

1S3player

Jun 17, 2026

May 15, 2025

N/A· v4

6.1 MEDIUM· v3

N/A· v2

The S3Player WordPress plugin through 4.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated us...Show more