Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Fv_flowplayer_video_player
(Foliovision)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 13 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-08-18 | CVE-2023-30499 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions. | Fv_flowplayer_video_player | 6.1 | ||
| 2019-07-17 | CVE-2019-13573 | A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. | Fv_flowplayer_video_player | 9.8 | ||
| 2019-08-09 | CVE-2019-14799 | The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS. | Fv_flowplayer_video_player | 6.1 | ||
| 2022-04-04 | CVE-2022-25613 | Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter. | Fv_flowplayer_video_player | 5.4 | ||
| 2022-03-18 | CVE-2022-25607 | Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727). | Fv_flowplayer_video_player | 7.2 | ||
| 2021-10-06 | CVE-2021-39350 | The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727. | Fv_flowplayer_video_player | 6.1 | ||
| 2021-01-15 | CVE-2020-35748 | Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter. | Fv_flowplayer_video_player | 5.4 | ||
| 2019-08-15 | CVE-2019-14800 | The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI. | Fv_flowplayer_video_player | 5.3 | ||
| 2019-08-09 | CVE-2019-14801 | The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection. | Fv_flowplayer_video_player | 9.8 | ||
| 2018-09-07 | CVE-2018-0642 | Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Fv_flowplayer_video_player | 6.1 |