Vulnerability in Foliovision Fv Flowplayer Video Player
CVE-2018-0642
Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
EPSS: 0.003 (55.3th percentile) — read the EPSS interpretation.
Affected products
- Foliovision Fv Flowplayer Video Player — versions 6.1.2 to 6.6.4
Public proof-of-concept exploits
References
- wordpress.org/plugins/fv-wordpress-flowplayer/ (x_refsource_CONFIRM)
- JVN#70246549 (x_refsource_JVN, third-party-advisory)
Frequently asked questions
- What is CVE-2018-0642?
- CVE-2018-0642 is a vulnerability in Foliovision Fv Flowplayer Video Player. Published 2018-09-07.
- Is CVE-2018-0642 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.