https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-2022.htmlhttps://patchthecve.com/cve/CVE-2013-2022.htmlTue, 16 Jun 2026 23:52:36 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, a different vulnerability than CVE-2013-1942 and CVEhttps://patchthecve.com/cve/CVE-2013-2023.htmlhttps://patchthecve.com/cve/CVE-2013-2023.htmlTue, 16 Jun 2026 23:52:36 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to incomplete blacklists, a different vulnerability than CVE-2https://patchthecve.com/cve/CVE-2013-1942.htmlhttps://patchthecve.com/cve/CVE-2013-1942.htmlTue, 16 Jun 2026 23:52:26 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id par