Videojs Video.Js vulnerabilities

1 known vulnerability affecting videojs/video.js.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-23414MEDIUMCVSS 6.1fixed in 7.14.3≥ unspecified, < 7.14.32021-07-28

CVE-2021-23414 [MEDIUM] CWE-79 CVE-2021-23414: This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTM This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.