CVE-2020-35748

Mô tả

Tham khảo

• docs.google.com/document/d/1xUTEmWqfy3u3KBSTjxCAGe3gIF15awFmzgCXrKfVl2U/edit · Exploit
• github.com/arkango · Third Party Advisory

Lỗ hổng khác của fv flowplayer video player

• CVE-2024-6338CAO 8.8The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the ‘exclude’ parameter in all versions up…
• CVE-2023-4520TRUNG BÌNH 6.1The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_fv_player_user_video’ parameter s…
• CVE-2023-30499TRUNG BÌNH 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions.
• CVE-2023-25066CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions.
• CVE-2022-25613TRUNG BÌNH 5.4Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 vi…