Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Audio Player Plugin | — | Update audio-player plugin to version 2.0.4.6, or a newer patched version | May 15, 2025 | Jan 30, 2013 |
| Freebsd | — | Upgrade typo3 | Dec 10, 2025 | Aug 5, 2013 |
| Ubuntu | — | Upgrade typo3-src | Nov 19, 2024 | Feb 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub