longtailvideo vulnerabilities

Products

• jw player 2
• jw player for flash html5 video plugin 1

Latest longtailvideo CVEs

Newest publication first

1. CVE-2012-3351 Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3)....

   Published 2020-02-20

   Medium·CVSS 6.1 EPSS 2.6%

   Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunct...

2. CVE-2014-4030 JW Player for Flash & HTML5 Video < 2.1.4 - Cross-Site Request Forgery leading to player deletion

   Published 2014-06-25

   Medium·CVSS 6.8 EPSS 2.9% Public exploit

   Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.

3. CVE-2012-2904 player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug para...

   Published 2012-05-21

   Medium·CVSS 4.3 EPSS 4.4%

   player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.