Web Dorado Spider Video Player vulnerabilities

2 vulnerabilities

Known vulnerabilities in Web Dorado Spider Video Player, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.8CVE-2015-4352web-doradoweb-dorado_spider_video_player
EPSS score
0.64%
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.6.1CVE-2014-8584web-doradoweb-dorado_spider_video_player+1
EPSS score
1.89%
Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.