Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-7341
4.3
MEDIUMCVSS v2
Published
March 24, 2014
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform= 2.3.8, = 2.0.2, = 2.5.1, = 2.5.3, = 2.3.4, = 2.2.2, = 2.3.1, = 2.0.4, = 2.4.1, = 2.4.2, = 2.4.3, = 2.3.6, = 2.1.10, = 2.1.2, = 2.2.6, = 2.2.9, = 2.6.1, = 2.0.1, = 2.5.2, = 2.4.6, = 2.0.3, = 2.0.5, = 2.0.6, = 2.1.9, = 2.2.1, = 2.2.10, = 2.3.7, = 2.1.3, = 2.2.5, = 2.2.7, = 2.2.8, = 2.3.10, <= 2.3.11, = 2.1.6, = 2.1.8, = 2.2.3, = 2.4.4, = 2.0.9, = 2.1.1, = 2.1.5, = 2.3.3, = 2.3.5, = 2.0.7, = 2.2.0, = 2.4.0, = 2.3.9, = 2.1.4, = 2.6.0, = 2.5.0, = 2.3.0, = 2.0.8, = 2.1.0, = 2.2.11, = 2.5.4, = 2.4.8, = 2.3.2, = 2.0.0, = 2.1.7, = 2.2.4, = 2.4.5, = 2.4.7, < 2.4.9, >= 2.5.0, < 2.5.5, >= 2.6.0, < 2.6.2NVD
flowplayer/flashGitHubFlowplayer Flash, the video player for the Web
GitHubFlowplayer Flash, the video player for the Web= 3.2.1, = 3.1.4, = 3.2.12, = 3.2.10, = 3.1.3, = 3.1.1, = 3.0.2, = 3.0.5, = 3.2.4, = 3.2.3, = 3.2.2, <= 3.2.16, = 3.2.7, = 3.2.5, = 3.0.4, = 3.2.15, = 3.2.13, = 3.2.8, = 3.1.5, = 3.0.3, = 3.0.1, = 3.2.11, = 3.2.9, = 3.1.0, = 3.0.6, = 3.0.0, = 3.2.14, = 3.2.0, = 3.2.6, = 3.1.2
NPM
RubyGems