Foliovision FV Flowplayer Video Player (Wordpress Plugin) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Foliovision FV Flowplayer Video Player (Wordpress Plugin), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2022-25607foliovisionfv flowplayer video player+2
EPSS score
0.83%
Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).6.4CVE-2022-25613foliovisionfv flowplayer video player+2
EPSS score
0.57%
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash parameter.