Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: S3Bubble Clear all filters
TI-2024-12886 CVE-2024-13865 · GHSA-qr28-f5f9-2wjf

drm-protected-video-streaming <= 4.2.1 - Reflected XSS

Priority MEDIUM 60

The S3Player WordPress plugin through 4.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00368 Published 2025-05-15 No fix listed CWE-79
TI-2024-12883 CVE-2024-13862 · GHSA-3g3r-jxgh-3hv4

S3Bubble Media Streaming <= 8.0 - Reflected XSS

Priority MEDIUM 64

The S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scri…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00273 Published 2025-03-11 No fix listed CWE-79
TI-2025-16699 CVE-2025-22818 · GHSA-742f-x9vh-cvq8

WordPress S3Player plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in S3Bubble S3Player – WooCommerce & Elementor Integration drm-protected-video-streaming allows Stored XSS.This issue aff…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-09 No fix listed CWE-79