CVE-2013-7343

Severity CVSS v4.0:
Pending analysis
Type:
CWE-79 Cross-Site Scripting (XSS)
Publication date:
24/03/2014
Last modified:
12/04/2025

Description

Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7342.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:flowplayer:flowplayer_html5:5.4.3:*:*:*:*:*:*:*