Security Advisory

CVE-2023-49178

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-12-15 14:40:46

Last updated 2026-04-28 16:08:56

Assigner Patchstack

CVSS score 7.1

State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gallery) allows Reflected XSS.This issue affects HDW Player Plugin (Video Player & Video Gallery): from n/a through 5.0.

← Browse all CVEs View on cve.org ↗