Description
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2009-1964 Vulnerability (CVE-2009-1964)
WebLogic CVE-2017-10137 Vulnerability (CVE-2017-10137)
WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)
WordPress Ultimate Member Plugin Other Vulnerability (CVE-2022-3383)
WordPress Plugin TagNinja 'id' Parameter Cross-Site Scripting (1.0)