Description
WordPress Plugin MP3-jPlayer is prone to a local file disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability could allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application; this may aid in further attacks. WordPress Plugin MP3-jPlayer version 2.3 is vulnerable; other versions may also be affected.
Remediation
Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available
References
http://k3dsec.blogspot.ro/2015/03/wordpress-plugin-mp3-jplayer-v23-local.html
http://packetstormsecurity.com/files/130956/WordPress-MP3-Jplayer-2.1-Local-File-Disclosure.html
Related Vulnerabilities
SharePoint CVE-2020-0892 Vulnerability (CVE-2020-0892)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1133)
WordPress Plugin Job Manager Multiple Cross-Site Scripting Vulnerabilities (0.7.18)
WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2)