CVE-2023-49178 (published 2023-12-15T14:40:46.985Z)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gallery) allows Reflected XSS.This issue affects HDW Player Plugin (Video Player & Video Gallery): from n/a through 5.0.


Affected products: Vendor: Mr. Hdwplayer
Product: HDW Player Plugin (Video Player & Video Gallery)
Versions: n/a