Shoutcast Icecast HTML5 Radio Player
Shoutcast Icecast HTML5 Radio Player has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Shoutcast Icecast HTML5 Radio Player has a vendor fix available, so running the current release closes it.
All of these findings were reported by Krzysztof Zając. Shoutcast Icecast HTML5 Radio Player is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-8666Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Shoutcast Icecast HTML5 Radio Player
Author
Sandeep Verma
HTML5 MP3 Radio FM MP3 Stream Player use Radio streams directly from Shoutcast and Icecast Server and play in HTML5 <audio> element. Please make sure use latest versions of radio server like Shoutcast V2 and Icecast V2 Free Shoutcast Icecast HTML5 Radio Player… MP3 Podcast support added to HTML5 MP3 Radio FM MP3 Stream Player HTML5 MP3 Radio FM MP3 Stream Player supports custom background color HTML5 MP3 Radio FM MP3 Stream Player allows Player Default Artwork Image HTML5 MP3 Radio FM MP3 Stream Player have custom Stream Title & Artist Info HTML5 MP3 Radio FM MP3 Stream Player have Social Profile Link Only HTTPS / SSL Radio Streams will play in Google Chrome 80+ As per Google Chrome 80+, mixed content is no longer supported. If the radio stream is without SSL and the website is with SSL, the radio stream will no longer be played. The solution is to set the stream to SSL. Read Here: https://blog.chromium.org/2019/10/no-more-mixed-messages-about-https.html Please make sure Protocols of Radio Live Stream and Website must be same. If your website running in Https (Secure) and your radio stream is Http (Unsecure) then browsers will not play that stream and throw Mixed Content Error in browser console log. HTTPS Secure Radio Streams Are you using HTTP Radio Stream providers? Do you need SSL/HTTPS Radio Stream for Icecast and Shoutcast? Subscribe Now and get your HTTPS Secure Radio Stream URL Pro Shoutcast Icecast HTML5 Radio Player… Self Hosted Plugin Files Customize Skin, Color & Size of player using CSS Current playing song info for Shoutcast / Icecast Server Customize social share (Twitter, Facebook, Google+) Radiosolution Player Autoplay Option Try Free HTML5 MP3 Radio FM MP3 Stream Player Create HTML5 Radio Player Non WordPress Buy HTML5 MP3 Radio MP3 Stream Player Features Setup and Configure Radio server and then stream it directly onto your wordpress website. Custom Artwork Image Volume Control Social Links Support For support please visit https://www.svnlabs.com/store/contact/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C