nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-14799 CVE-2019-14799
MEDIUM
Record summary
CVE-2019-14799 has a selected CVSS score of 6.1 (medium); EIP currently links 2 curated repository PoCs.
Description
The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.
Description source: CVE List
Exploitation context
Available material
- Curated repository PoCs
- 2
Proofs of concept
2Curated repository PoCs
GitHubCVE-2019-14799Curated repository PoCby yubsyStars: 112Not analyzed1 file
GitHubCVE-2019-14799Curated repository PoCby 0xd3vilStars: 127Not analyzed1 file
References
4wordpress.org
https://wordpress.org/plugins/fv-wordpress-flowplayer wpvulndb.com
https://wpvulndb.com/vulnerabilities/9278 pluginvulnerabilities.com
https://www.pluginvulnerabilities.com/2019/05/15/information-disclosure-vulnerability-in-fv-player-fv-flowplayer-video-player