Most recent entries from all

cnvd-2016-02897

EUVD-2026-84564

fkie_cve-2016-4567

Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."

GHSA-277w-qpxr-2549 — MediaElement Vulnerable to Reflected XSS

Affected: npm: mediaelement, Packagist: contao-components/mediaelement, Packagist: contao/core

Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.swf in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."

gsd-2016-4567

UBUNTU-CVE-2016-4567

Affected: Ubuntu:16.04:LTS: mediaelement, Ubuntu:18.04:LTS: mediaelement, Ubuntu:20.04:LTS: mediaelement, Ubuntu:22.04:LTS: mediaelement, Ubuntu:24.04:LTS: mediaelement, Ubuntu:25.10: mediaelement, Ubuntu:26.04:LTS: mediaelement