How it was found

Hey there,

There's a SWF based XSS on ssl-ccstatic.highwebmedia.com. You may want to update/remove the file.

#POC https://ssl-ccstatic.highwebmedia.com/jwplayer/player.swf?playerready=alert(document.domain)

Thanks, Ben

Impact