Vulnerabilities and Security Researches

FV Flowplayer Video Player, CVE-2022-25613

CVE, Research URL: CVE-2022-25613
Home page URL: Security reports for FV Flowplayer Video Player
Application: FV Flowplayer Video Player
Published on: Apr 05, 2022
Research Description: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter.
Affected versions: max 6.0.3.4.
Status: vulnerable