CVE-2018-1000830: XR3PLAYER Project XR3PLAYER

Critical severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days.

XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

Affected products

• XR3PLAYER Project XR3PLAYER: up to and including 3.124

Published 2018-12-20. Last modified 2026-06-17.