title: MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting
description: The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: MP3 Audio Player for Music, Radio & Podcast by Sonaar
vendor: Unknown
versions:
lessThan: 2.4.2, status: affected, version: 2.4.2, versionType: custom
}