Skip to content
Sign in
7.1 High

CVE-2025-54056 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through <= 3.5.8.

Affected products and versions

Product Affected versions Fixed in
Responsive HTML5 Audio Player PRO With Playlist 3.5 earliest → 3.5.8 No fix stated

Other CVEs of Responsive HTML5 Audio Player PRO With Playlist

The 2 CVEs of Responsive HTML5 Audio Player PRO With Playlist →
CVE-2025-32287 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup… 8.5 High
Track this CVE