TI-2024-25263 CVE-2024-37957 · GHSA-rfgc-p39j-c9qvWordPress Bradmax Player plugin <= 1.1.27 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 29Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bradmax Bradmax Player allows Stored XSS.This issue affects Bradmax Player: from n/a through 1.1.27.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00317 · Published 2024-07-20 · No fix listed CWE-79