WordPress Plugin Vulnerabilities

background-music 1.0 - jPlayer.swf XSS

Description

The background-music WordPress plugin was affected by a jPlayer.swf XSS security vulnerability.

Affects Plugins

Plugin icon
background-music
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
a8accca3-a479-440d-9c37-695d54a64bc9

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 8 years ago)

Other

Published
Title
Published
2019-05-21
Title
WP Slimstat <= 4.8 - Unauthenticated Stored XSS from Visitors
Published
2022-11-03
Title
Google Forms <= 0.95 - Admin+ Stored XSS
Published
2016-08-02
Title
WangGuard <= 1.7.1 - Cross-Site Scripting (XSS)
Published
2021-09-22
Title
Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting
Published
2023-11-28
Title
Formzu WP < 1.6.7 - Contributor+ Stored XSS via id