Description
Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.
Remediation
References
Related Vulnerabilities
MySQL CVE-2013-1532 Vulnerability (CVE-2013-1532)
WordPress Plugin HTML5 jQuery Audio Player Multiple Cross-Site Scripting Vulnerabilities (2.3)
WordPress Plugin Vodpod Video Gallery 'gid' Parameter Cross-Site Scripting (3.1.5)
MySQL CVE-2019-2808 Vulnerability (CVE-2019-2808)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-29004)