Security Advisory

CVE-2025-23947

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-16 20:08:04

Last updated 2026-05-11 22:49:48

Assigner Patchstack

State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in M.J WP-Player wp-player allows Stored XSS.This issue affects WP-Player: from n/a through <= 2.6.1.

← Browse all CVEs View on cve.org ↗