CVE-2024-22299: WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22299?
CVE-2024-22299 has been classified with a critical severity due to the potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-22299?
To mitigate CVE-2024-22299, update the FV Flowplayer Video Player to the latest version, or apply any available patches from the vendor.
What versions are affected by CVE-2024-22299?
CVE-2024-22299 affects FV Flowplayer Video Player versions up to 7.5.41.7212.
What risks are associated with CVE-2024-22299?
Exploiting CVE-2024-22299 can allow attackers to execute arbitrary scripts in the context of the user's browser session.
Is this vulnerability present in all installations of FV Flowplayer Video Player?
CVE-2024-22299 is specifically present in installations of FV Flowplayer Video Player from versions n/a through 7.5.41.7212.