CVE-2013-2022

npm/jplayer CVE-2013-2022: medium, EPSS 2.73%

jplayer Cross Site Scripting vulnerability

Action: Upgrade jplayer to 2.3.0 or later.

npm i jplayer@2.3.0

Affected

Fixed versions

Sources

• osv: GHSA-3jcq-cwr7-6332
• https://nvd.nist.gov/vuln/detail/CVE-2013-2022
• https://github.com/happyworm/jPlayer/commit/c5fe17bb4459164bd59153b57248cf94b8867373
• https://github.com/jplayer/jPlayer/commit/c5fe17bb4459164bd59153b57248cf94b8867373
• https://github.com/jplayer/jPlayer
• http://marc.info/?l=oss-security&m=136570964825921&w=2
• http://marc.info/?l=oss-security&m=136726705917858&w=2
• http://marc.info/?l=oss-security&m=136773622321563&w=2
• http://seclists.org/fulldisclosure/2013/Apr/192
• http://www.jplayer.org/2.3.0/release-notes
• http://www.openwall.com/lists/oss-security/2013/06/27/7
• http://www.openwall.com/lists/oss-security/2013/07/04/5

CVE-2013-2022 · published 2022-05-17T04:39:22Z · modified 2024-04-02T14:41:43.363778Z · JSON