Description
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
Remediation
References
Related Vulnerabilities
WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)
WordPress Plugin Name Directory Cross-Site Request Forgery (1.17.4)
MySQL CVE-2020-2759 Vulnerability (CVE-2020-2759)
WordPress Plugin WP OAuth Server (OAuth Authentication) Security Bypass (3.1.4)
Oracle Database Server CVE-2006-0260 Vulnerability (CVE-2006-0260)