Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com, CVE-2025-23854

CVE, Research URL: CVE-2025-23854
Home page URL: Security reports for Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com
Application: Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com
Published on: Jan 17, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YesStreaming.com Shoutcast and Icecast Internet Radio Hosting Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com allows Stored XSS.This issue affects Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com: from n/a through 3.3.
Affected versions: max 3.3.
Status: vulnerable