johanaarstein

Products

ProductCVEsExploitedLatest
AM LottiePlayer2–Apr 8, 2026

Exploited and recent CVEs

  • CVE-2025-1794 Medium 5.4 AM LottiePlayer <= 3.6.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG 0.2%
  • CVE-2025-1529 Medium 6.4 AM LottiePlayer <= 3.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Lottie File 0.2%