TI-2009-01381 CVE-2009-1457 · GHSA-wfh7-j435-xvj4Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x…Priority LOW 22Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01033 · Published 2009-04-28 · No fix listed CWE-79