Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, as demonstrated using document.write in the jQuery parameter, a different vulnerability than CVE-2013-2022 and CVE-2013-2023.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2013-08-15T17:00:00
Updated: 2024-08-06T15:20:37.308Z
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-1942
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-08-15T17:55:24.400
Modified: 2024-11-21T01:50:43.190
Link: CVE-2013-1942
Redhat
No data.