CVE-2026-85347

The FV Flowplayer Video Player WordPress plugin, versions before 7.5.56.7212 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and escape user-supplied values before they are outputted on a page, specifically related to the Text Lightb...