CVE-2021-24302: Neox Hana Flv Player

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the 'Default Skin' field.

Affected products

• Neox Hana Flv Player: up to and including 3.1.3

Published 2021-05-24. Last modified 2026-06-17.