CVE-2026-49773mediumCWE-79

CVE-2026-49773: falha de média gravidade em FolioVision FV Flowplayer Video Player

WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar FV Flowplayer Video Player

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.2%
Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
FolioVision · FV Flowplayer Video Player
CVEs relacionadas — FolioVision FV Flowplayer Video Player

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30499HIGHWordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-118079HIGHWordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2023-25066MEDIUMWordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-42695MEDIUMWordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-121764HIGHWordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - Cross Site Scripting (XSS) vulnerabilityEPSS —