Threats tagged 'ghsa-8w8j-842q-xx4q'

The FV Flowplayer Video Player WordPress plugin versions prior to 7.5.56.7212 contain a vulnerability where user-supplied input is not properly sanitized and escaped before being output on a page. This flaw allows users with Contributor role or higher to inject arbitrary scripts that execute when viewed by users with higher privileges.