ME
Product
Mediaelement.js
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Mediaelement.js to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4567 | 6.1 | May 22 | Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject… Affected: through 2.20.1 |
| CVE-2022-4699 | 5.4 | Jan 30 | The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users… Affected: through 4.2.8 |
| CVE-2013-1967 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows… Affected: through 2.11.1; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
Showing 3