Advisories · Technology
2winfactor Presto Player.
Every CVE that names 2winfactor Presto Player among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <presto-player> Tag
- 2winfactor Presto Player
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
- 2winfactor Presto Player
- Cross-site scripting (XSS)