mp3-player versions 2.5 and below suffer from cross site scripting and content spoofing vulnerabilities…. mp3-player versions 2.5 and below suffer from cross site scripting and content spoofing vulnerabilities.

Read more http://packetstormsecurity.com/files/123594/mp3player-xss.txt