Lucene search
MitreCVELIST:CVE-2020-35748HistoryJan 15, 2021 - 4:50 p.m.
CVE-2020-35748
2021-01-1516:50:42
mitre
www.cve.org
3
cross-site scripting
fv flowplayer video player
wordpress
remote authenticated users
injection
json field
EPSS
0.001
Percentile
26.5%
Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in the data parameter.
Related
wpvulndb
wpvulndb
patchstack
patchstack
nvd
nvd
CVE-2020-35748
2021-01-15 17:15:12
cve
cve
CVE-2020-35748
2021-01-15 17:15:12
prion
prion
Cross site scripting
2021-01-15 17:15:00