CVE-2013-7341 in Flowplayer Flash
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
03/20/2014
Disclosure
03/24/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66747 | Flowplayer Flash cross site scripting | 79 | Not defined | Not defined | CVE-2013-7341 |