2 matches found
CVE-2020-35748
Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...
5.4CVSS6.2AI score0.0092EPSS
SaveExploits1References2
CVE-2020-35748: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...
5.4CVSS6AI score0.0092EPSS
SaveExploits1References2
20