TI-2013-01552 CVE-2013-1765 · GHSA-w7vf-2g3g-3x39Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv…Priority LOW 27Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) link or (2) playerready parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03914 · Published 2014-05-14 · No fix listed CWE-79