Longtailvideo

longtailvideo

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Jw Player For Flash & Html5 Video Plugin

jw_player_for_flash_&_html5_video_plugin

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3351 1Longtailvideo 1Jw Player Nov 21, 2024 Feb 20, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter,...Show more Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.Show less
CVE-2014-4030 1Longtailvideo 1Jw Player For Flash & Html5 Video Plugin May 6, 2026 Jun 25, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete acti...Show more Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.Show less
CVE-2012-2904 1Longtailvideo 1Jw Player Apr 29, 2026 May 21, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter.