CVE-2011-4568

Cross-site scripting XSS vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI...

PT-2011-4996

Name of the Vulnerable Software and Affected Versions Flowplayer plugin versions prior to 1.2.12 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the URI. Recommendations For versions prior to...

CVE-2011-4568: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI...

WordPress Flowplayer Plugin <= 1.2.11 - XSS

Because of this vulnerability in view/frontend-head.php, the attackers can inject arbitrary web script or HTML via the URI. Solution Update the plugin...

Flowplayer 3.2.7 - linkUrl Cross-Site Scripting

Flowplayer 3.2.7 - linkUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/48651/info Flowplayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage thi...

Flowplayer 3.2.7 - 'linkUrl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48651/info Flowplayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...