Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

HTML5 Video Player – Embed and Play Videos in Custom Player — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in HTML5 Video Player – Embed and Play Videos in Custom Player, with AI-generated Chinese analysis, references, and POCs.

Vendor: bplugins

CVE IDTitleCVSSSeverityPaused
CVE-2024-13156 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter CWE-79 6.4 Medium2025-01-14
CVE-2024-7727 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler CWE-862 5.3 Medium2024-09-11
CVE-2024-7721 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CWE-862 4.3 Medium2024-09-11

All 3 known CVE vulnerabilities affecting HTML5 Video Player – Embed and Play Videos in Custom Player with full Chinese analysis, references, and POCs where available.