CVE-2026-78281 Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
CP Media Player 1.3	earliest → 1.3.0	No fix stated

Other CVEs of CP Media Player

The 2 CVEs of CP Media Player →

CVE-2024-31941 Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from… 5.4 Medium