PULSE
EN
FEED
ransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technologyransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technology
← Todos los CVEs
CVE Watch5 nov 2026

CVE-2026-85347

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before outputting it i

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 5 nov 2026 · Última mod.: 5 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before outputting it in a page, which could allow users with the Contributor role and above to inject arbitrary web scripts that execute when a higher-privileged user views the affected page.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.