{"id":"CVE-2024-30530","aliases":["EUVD-2024-28450","GHSA-hp3r-75p4-f8ch"],"status":"published","title":"WordPress MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar plugin \u003c= 5.1 - Cross Site Scripting (XSS) vulnerability","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.1.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00337,"percentile":0.27311,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-03-31T20:07:00Z","modified":"2026-06-17T07:27:08Z","products":[{"vendor":"sonaar","product":"mp3 audio player for music, radio \u0026 podcast by sonaar"},{"vendor":"sonaar","product":"mp3_audio_player_for_music\\,_radio_\\\u0026_podcast"},{"vendor":"sonaar music","product":"mp3 audio player for music, radio \u0026 podcast by sonaar"}],"references":[{"url":"https://patchstack.com/database/vulnerability/mp3-music-player-by-sonaar/wordpress-mp3-audio-player-for-music-radio-podcast-by-sonaar-plugin-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30530"},{"url":"https://github.com/advisories/GHSA-hp3r-75p4-f8ch"}],"sources":{"cve":[{"id":"CVE-2024-30530","title":"WordPress MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar plugin \u003c= 5.1 - Cross Site Scripting (XSS) vulnerability","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.1.","status":"published","published":"2024-03-31T20:07:00.558Z","modified":"2026-04-28T16:09:26.248Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2024-28450","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.1.","status":"published","published":"2024-03-31T20:07:00Z","modified":"2026-04-28T16:09:26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:06:07.488562Z"}],"ghsa":[{"id":"GHSA-hp3r-75p4-f8ch","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.1.\n\n","status":"published","published":"2024-03-31T21:30:36Z","modified":"2024-03-31T21:30:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:55:45.740984Z"}],"nvd":[{"id":"CVE-2024-30530","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.1.","status":"published","published":"2024-03-31T20:15:08.49Z","modified":"2026-06-17T07:27:08.01Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:46.373977Z"}]}}