CVE-2021-24302

Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the 'Default Skin' field.

Affected (CNA)

Vendor / product	Versions
HanaDaddy / Hana Flv Player	affected 3.1.3 through 3.1.3

CWE

CWE-79

References

https://wpscan.com/vulnerability/372a66ca-1c3c-4429-86a5-81dbdaa9ec7d

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/372a66ca-1c3c-4429-86a5-81dbdaa9ec7d