Lucene search
+L

131 matches found

Vulnrichment
Vulnrichment
added 2023/08/18 2:41 p.m.14 views

CVE-2023-30499 WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.32.7212 versions...

7.1CVSS5.9AI score0.00396EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/18 2:41 p.m.25 views

CVE-2023-30499 WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.32.7212 versions...

7.1CVSS6.3AI score0.00396EPSS
Exploits0References1
CVE
CVE
added 2023/08/18 2:41 p.m.39 views

CVE-2023-30499

CVE-2023-30499 refers to an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the FolioVision FV Flowplayer Video Player plugin for WordPress, affected versions

7.1CVSS6AI score0.00396EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/18 12:0 a.m.6 views

PT-2023-22735 · Foliovision · Fv Flowplayer Video Player

Name of the Vulnerable Software and Affected Versions: FolioVision FV Flowplayer Video Player plugin versions prior to 7.5.32.7212 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a...

7.1CVSS6.3AI score0.00396EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/18 12:0 a.m.8 views

WordPress plugin FV Flowplayer Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00396EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/05/03 12:0 a.m.11 views

WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.32.7212 Fixed in 7.5.35.7212 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30499 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 08f2f9dc3464...

7.1CVSS5.6AI score0.00396EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/02/14 6:15 a.m.21 views

CVE-2023-25066

Cross-Site Request Forgery CSRF vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.30.7212 versions...

8.8CVSS5.8AI score0.00271EPSS
Exploits0References1
Prion
Prion
added 2023/02/14 6:15 a.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.30.7212 versions...

6.8CVSS8.7AI score0.00271EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/02/14 5:32 a.m.48 views

CVE-2023-25066

CVE-2023-25066 is a Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin for WordPress, affected versions

8.8CVSS6.5AI score0.00271EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/14 5:32 a.m.40 views

CVE-2023-25066 WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.30.7212 versions...

4.3CVSS9AI score0.00271EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/14 5:32 a.m.11 views

CVE-2023-25066 WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in FolioVision FV Flowplayer Video Player plugin = 7.5.30.7212 versions...

4.3CVSS8.8AI score0.00271EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/02/02 12:0 a.m.13 views

WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.30.7212 Fixed in 7.5.31.7212 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25066 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6e1e63620b79...

8.8CVSS7AI score0.00271EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/07/29 12:0 a.m.17 views

WordPress FV Flowplayer Video Player Plugin < 7.3.15.727 SQLi Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

9.8CVSS7AI score0.01815EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/07/29 12:0 a.m.11 views

WordPress FV Flowplayer Video Player Plugin < 7.3.14.727 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.1CVSS7AI score0.02022EPSS
Exploits2References2
CNVD
CNVD
added 2022/04/07 12:0 a.m.48 views

WordPress FV Flowplayer Video Player跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress FV Flowplayer Video Player 7.5.18.727 and previous versions have a cross-site scripting vulnerability tha...

5.4CVSS2.7AI score0.00549EPSS
Exploits0References1
OSV
OSV
added 2022/04/04 8:15 p.m.8 views

CVE-2022-25613

Authenticated Persistent Cross-Site Scripting XSS vulnerability in FV Flowplayer Video Player WordPress plugin versions = 7.5.18.727 via &fvwpflowplayerfieldsplash parameter...

5.4CVSS5.8AI score0.00549EPSS
Exploits0References2
CVE
CVE
added 2022/04/04 7:46 p.m.77 views

CVE-2022-25613

Summary : CVE-2022-25613 is an authenticated persistent Cross-Site Scripting (XSS) vulnerability in the WordPress FV Flowplayer Video Player plugin (versions

5.4CVSS4.7AI score0.00549EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/04 12:0 a.m.59 views

WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress FV Flowplayer Video Player plugin versions = 7.5.18.727. Solution Update the WordPress FV Flowplayer Video Player plugin to the latest available version at least 7.5.19.727...

5.4CVSS3.1AI score0.00549EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/03/22 12:0 a.m.40 views

WordPress FV Flowplayer Video Player plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress FV Flowplayer Video Player plugin version 7.5.15.727 and earlier versions are vulnerable to SQL injection. The vulnerability...

7.2CVSS4AI score0.00814EPSS
Exploits0References1
Prion
Prion
added 2022/03/18 6:15 p.m.17 views

Sql injection

Authenticated author or higher user role SQL Injection SQLi vulnerability discovered in FV Flowplayer Video Player WordPress plugin versions = 7.5.15.727...

6.5CVSS7.4AI score0.00814EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder