CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0.
Explanation of Vulnerability in Simple Terms
The HTML5 MP3 Player with Folder Feedburner Playlist Free plugin processes untrusted serialized data without validation. An authenticated administrator can craft malicious input that causes the plugin to deserialize and execute arbitrary code on the site. This affects versions up to 2.8.0.
What an attacker can do
Run arbitrary code on the site by submitting malicious serialized data.
Potential impact on your site
A compromised admin account can fully control your site, steal data, or inject malware.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
