flowplayer/flash

Releases8

Frequency2 months 5 days

Last Release over 12 years ago

Stars283

Flowplayer Flash, the video player for the Web

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2013-7341 ↗	Mar 24, 2014Monday, 24 March 2014, 14:20	—	4.3 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.