exploitDog

CVE-2025-54044

Опубликовано: 20 авг. 2025

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMedia Elite Video Player allows Reflected XSS. This issue affects Elite Video Player: from n/a through 10.0.5.

Ссылки

https://patchstack.com/database/wordpress/plugin/elite-video-player/vulnerability/wordpress-elite-video-player-10-0-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve

EPSS

Процентиль: 8%

0.00029

Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-g39q-vh7w-j35w

CVSS3: 7.1

github

6 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in _CreativeMedia_ Elite Video Player allows Reflected XSS. This issue affects Elite Video Player: from n/a through 10.0.5.

EPSS

Процентиль: 8%

0.00029

Низкий

7.1 High

CVSS3

Дефекты

CWE-79