CVE-2024-1061

Name of the Vulnerable Software and Affected Versions HTML5 Video Player version < 2.5.25

Description The issue is an unauthenticated SQL injection vulnerability. It affects the id parameter in the get view function.

Recommendations For version < 2.5.25, update to version 2.5.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the get view function until a patch is available. Avoid using the id parameter in the affected function until the issue is resolved.