fv_flowplayer_video_player Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fv_flowplayer_video_player/ Sun, 26 Feb 2023 06:44:18 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png fv_flowplayer_video_player Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fv_flowplayer_video_player/ 32 32 CVE-2018-0642 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0642/ Sun, 26 Feb 2023 06:44:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0642/ Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The post CVE-2018-0642 appeared first on CVE Vulnerability.

]]> Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The post CVE-2018-0642 appeared first on CVE Vulnerability.

]]> CVE-2020-35748 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35748/ Sun, 26 Feb 2023 06:41:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35748/ Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter.

The post CVE-2020-35748 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter.

The post CVE-2020-35748 appeared first on CVE Vulnerability.

]]> CVE-2019-14799 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14799/ Sun, 26 Feb 2023 06:30:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14799/ The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

The post CVE-2019-14799 appeared first on CVE Vulnerability.

]]> The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

The post CVE-2019-14799 appeared first on CVE Vulnerability.

]]> CVE-2019-14800 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14800/ Sun, 26 Feb 2023 06:30:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14800/ The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI.

The post CVE-2019-14800 appeared first on CVE Vulnerability.

]]> The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI.

The post CVE-2019-14800 appeared first on CVE Vulnerability.

]]> CVE-2019-14801 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14801/ Sun, 26 Feb 2023 06:30:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14801/ The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

The post CVE-2019-14801 appeared first on CVE Vulnerability.

]]> The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

The post CVE-2019-14801 appeared first on CVE Vulnerability.

]]> CVE-2019-13573 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-13573/ Sun, 26 Feb 2023 06:30:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-13573/ A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.

The post CVE-2019-13573 appeared first on CVE Vulnerability.

]]> A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.

The post CVE-2019-13573 appeared first on CVE Vulnerability.

]]> CVE-2021-39350 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-39350/ Thu, 23 Feb 2023 14:11:29 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-39350/ The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 – 7.5.2.727.

The post CVE-2021-39350 appeared first on CVE Vulnerability.

]]> The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 – 7.5.2.727.

The post CVE-2021-39350 appeared first on CVE Vulnerability.

]]> CVE-2022-25607 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-25607/ Thu, 23 Feb 2023 05:17:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-25607/ Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions

The post CVE-2022-25607 appeared first on CVE Vulnerability.

]]> Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).

The post CVE-2022-25607 appeared first on CVE Vulnerability.

]]> CVE-2022-25613 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-25613/ Thu, 23 Feb 2023 05:17:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-25613/ Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions

The post CVE-2022-25613 appeared first on CVE Vulnerability.

]]> Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter.

The post CVE-2022-25613 appeared first on CVE Vulnerability.

]]> CVE-2023-25066 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25066/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25066 Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin

The post CVE-2023-25066 appeared first on CVE Vulnerability.

]]> Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions.

The post CVE-2023-25066 appeared first on CVE Vulnerability.

]]>