Haxtheweb Video-player vulnerabilities
- haxtheweb haxcms-nodejs, iframe-loader, video-player +2 more HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover 9.3 Critical
- haxtheweb video-player, haxcms-nodejs +1 more HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft 9.3 Critical