npm/@haxtheweb/video-player — 2 CVEs · VulnScopepkg:npm/@haxtheweb/video-player
共 2 筆 CVE
✅ 檢查你的版本
所有已知漏洞
—CVE-2026-46396Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover from 0, < 26.0.0
—CVE-2026-46496HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft from 0, < 26.0.0