Vulnerabilities > CVE-2021-39350 - Unspecified vulnerability in Foliovision FV Flowplayer Video Player 7.5.0.727/7.5.1.727/7.5.2.727

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
foliovision
NVD
Published: 2021-10-06
Updated: 2024-11-21

Summary

The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.

Vulnerable Configurations

Part Description Count
Application
Foliovision
3

References