CVE-2011-4568
fv_wordpress_flowplayer_plugin < 1.2.12 - Cross-Site Scripting via URI Parameter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.
References (4)
Core 4
Core References
Product x_refsource_confirm
http://wordpress.org/extend/plugins/fv-wordpress-flowplayer/changelog/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/46346
Product x_refsource_confirm
http://plugins.trac.wordpress.org/changeset?reponame=&new=413607%40fv-wordpress-flowplayer&old=409594%40fv-wordpress-flowplayer
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/50008
Scores
EPSS
0.0183
EPSS Percentile
76.6%
Details
CWE
CWE-79
Status
published
Products (26)
foliovision/fv_wordpress_flowplayer_plugin
0.9.12
foliovision/fv_wordpress_flowplayer_plugin
0.9.13
foliovision/fv_wordpress_flowplayer_plugin
0.9.14
foliovision/fv_wordpress_flowplayer_plugin
0.9.15
foliovision/fv_wordpress_flowplayer_plugin
0.9.16
foliovision/fv_wordpress_flowplayer_plugin
0.9.18
foliovision/fv_wordpress_flowplayer_plugin
1.0
foliovision/fv_wordpress_flowplayer_plugin
1.0.1
foliovision/fv_wordpress_flowplayer_plugin
1.0.2
foliovision/fv_wordpress_flowplayer_plugin
1.0.3
... and 16 more
Published
Nov 29, 2011
Tracked Since
Feb 18, 2026