RSS   Vulnerabilities for 'Fv flowplayer video player'   RSS

2022-04-04
 
CVE-2022-25613

CWE-79
 
 
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter.

 
2022-03-18
 
CVE-2022-25607

CWE-89
 
 
Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).

 
2021-10-06
 
CVE-2021-39350

CWE-79
 
 
The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.

 
2021-01-15
 
CVE-2020-35748

CWE-79
 
 
Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter.

 
2019-08-15
 
CVE-2019-14800

CWE-200
 
 
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI.

 
2019-08-09
 
CVE-2019-14801

CWE-89
 
 
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

 
 
CVE-2019-14799

CWE-79
 
 
The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

 
2019-07-17
 
CVE-2019-13573

CWE-89
 
 
A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.

 

 >>> Vendor: Foliovision 3 Products
Fv wordpress flowplayer plugin
Foliopress wysiwyg
Fv flowplayer video player

Copyright 2024, cxsecurity.com

 

Back to Top