CVE-2012-3351

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.

References

Advisories
More

https://www.securityfocus.com/bid/55199/exploit

https://www.securityfocus.com/bid/54101/discuss

https://www.exploit-db.com/exploits/37672

https://www.exploit-db.com/exploits/37552

http://technet.microsoft.com/security/msvr/msvr12-009

http://developer.longtailvideo.com/trac/ticket/1585

Details

Source: Mitre, NVD

Published: 2020-02-20

Updated: 2020-02-24

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.02998