medium6.5
CVE-2026-118097
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows St…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This issue affects Flash & HTML5 Video: from n/a through 2.14.0.
Affected products
| Product | Affected versions |
|---|---|
| Flash & HTML5 Video: From N/A | through 2.14.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.