PT-2025-7751 · Playerjs · Playerjs
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
PlayerJS versions n/a through 2.23
Description
The issue affects PlayerJS, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables cross-site scripting.
Recommendations
For versions n/a through 2.23, update to a version that contains a fix for this issue to prevent DOM-Based XSS attacks.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Playerjs