Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-23561 EUVD-2025-3249GHSA-9hrc-j3gj-6hp9

WordPress MLL Audio Player MP3 Ajax plugin <= 0.7 - Cross Site Scripting (XSS) vulnerability

Published Feb 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robertkay MLL Audio Player MP3 Ajax music-let-loose-mp3-audio-player allows Stored XSS.This issue affects MLL Audio Player MP3 Ajax: from n/a through <= 0.7.

Affected products

VendorProductAffectedFixed
robertkay MLL Audio Player MP3 Ajax ≤ 0.7 —

References