PT-2026-26595 · Joshuae1974 · Joshuae1974 Flash Video Player

Published 2026-03-20 · Updated 2026-03-22 · CVE-2024-32537

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions joshuae1974 Flash Video Player versions n/a through 5.0.4

Description A cross-site request forgery (CSRF) issue exists in joshuae1974 Flash Video Player. This allows attackers to perform actions on behalf of an unsuspecting user. The issue involves the potential for unauthorized actions due to a lack of proper CSRF protection.

Recommendations Update joshuae1974 Flash Video Player to a version later than 5.0.4.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-32537

Affected Products

Joshuae1974 Flash Video Player

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-32537 · Security Note
• https://twitter.com/CVEnew/status/2035626998358265887 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/flash-video-player/vulnerability/wordpress-flash-video-player-plugin-5-0-4-csrf-to-xss-vulnerability?_s_id=cve · Note