Skip to content
Sign in
6.5 Medium

CVE-2026-62039 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.8.8.

Affected products and versions

Product Affected versions Fixed in
Html5 Audio Player 2.8 earliest → 2.8.8 No fix stated

Other CVEs of Html5 Audio Player

The 3 CVEs of Html5 Audio Player →
CVE-2025-39524 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio… 6.5 Medium CVE-2024-37445 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins… 6.5 Medium
Track this CVE