TI-2013-03087 CVE-2013-3530 · GHSA-gjw6-4wg7-464wSQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for…Priority MEDIUM 40SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04644 · Published 2013-05-10 · No fix listed CWE-89