PT-2021-11842

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player plugin versions prior to 7.4.37.727 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via the fv wp fvvideoplayer src JSON field in the data parameter. This is a...