CVE-2025-22628

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

CVE-2025-22628

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

CVE-2025-22628 WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

CVE-2025-22628

CVE-2025-22628 describes a CSRF-to-Stored XSS risk in the WordPress plugin Filled In . Affected versions are listed as

CVE-2025-22628: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

PT-2025-13269

Name of the Vulnerable Software and Affected Versions Foliovision Filled In versions 1.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...

CVE-2024-56032

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Descriptions fv-descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a through = 1.4...

CVE-2024-22299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...

CVE-2025-24613

CVE-2025-24613: FV Thoughtful Comments for WordPress is affected (FV Thoughtful Comments plugin

CVE-2025-24613 WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in FolioVision FV Thoughtful Comments thoughtful-comments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Thoughtful Comments: from n/a through = 0.3.5...

CVE-2025-24613 WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in FolioVision FV Thoughtful Comments thoughtful-comments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Thoughtful Comments: from n/a through = 0.3.5...

CVE-2025-24613: Missing Authorization

Missing Authorization vulnerability in FolioVision FV Thoughtful Comments thoughtful-comments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Thoughtful Comments: from n/a through = 0.3.5...

CVE-2024-56032

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Descriptions fv-descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a through = 1.4...

CVE-2024-56032

CVE-2024-56032 describes a Reflected XSS in the FV Descriptions plugin for Foliovision FV Descriptions (WordPress) affecting version up to 1.4. The CVSS 3.1 base score is 7.1 (HIGH) with AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Exploitation status and concrete fixes are not detailed in the provided d...

CVE-2024-56032: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Descriptions fv-descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a through = 1.4...

PT-2025-3180 · Foliovision · Fv Descriptions

Name of the Vulnerable Software and Affected Versions: Foliovision FV Descriptions versions n/a through 1.4 Description: The issue affects Foliovision FV Descriptions, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

CVE-2024-35631

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Foliovision FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.45.7212...

CVE-2024-35631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Foliovision FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.45.7212...

CVE-2024-32078

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowplayer Video Player: from n/a through 7.5.44.7212...

CVE-2024-32078

CVE-2024-32078 involves the FV Flowplayer Video Player WordPress plugin. The issue is an authenticated open redirect in FV Flowplayer Video Player versions affected up to 7.5.44.7212, enabling an attacker with Contributor+ access to redirect users to an arbitrary site. The CVE entry notes a patch...