CVE-2025-39524

Publication date

2025-04-16 12:45:49

Family

Patchstack

State

PUBLISHED

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Player allows Stored XSS. This issue affects Html5 Audio Player: from n/a through 2.2.28.