CVE-2020-35748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...

PT-2021-11842

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player plugin versions prior to 7.4.37.727 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via the fv wp fvvideoplayer src JSON field in the data parameter. This is a...