CVE-2013-1464

MEDIO 4.3CVE-2013-1464 · Published 07/02/2013 · updated 16/06/2026

In breve

CVE-2013-1464 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda audio player (doryphores).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.4%, superiore al 93.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
audio player doryphores	`= 2.0.1.0= 2.0.2.0= 2.0.3.0= 2.0.3.1= 2.0.4.0= 2.0.4.1= 2.0.4.3= 2.0.4.4≤ 2.0.4.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter.

References

insight-labs.org
packetstormsecurity.com/files/120129/WordPress-Audio-Player-SWF-Cross-Site-Scripting.html
secunia.com/advisories/52083
secunia.com/advisories/58854
wordpress.org/extend/plugins/audio-player/changelog · Patch
securityfocus.com/bid/57848

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free