Log out
Get PRO

Latest

Input validation vulnerability in https://codecanyon.net/item/shout-html5-radio-player-with-ads-shoutcast-and-icecast-support/20522568 3.5.4

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 17, 2025

A popular plugin for WordPress, called “Shout HTML5 Radio Player with Ads”, has a security issue that could be exploited by attackers. This vulnerability, known as Reflected Cross-Site Scripting, affects all versions of the plugin up to 3.5.4. This means that if a user is tricked into clicking on a harmful link, the attacker could inject their own web scripts onto the page. This could lead to unauthorized access and potential harm to the user’s device.

Detected in:

https://codecanyon.net/item/shout-html5-radio-player-with-ads-shoutcast-and-icecast-support/20522568 fixed vulnerable versions: >= * <= 3.5.4
SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.