CVE-2026-42699 Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions

Description

Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.

Affected products and versions

Product	Affected versions	Fixed in
FV Player 8 8.1	earliest → 8.1.8	No fix stated

Other CVEs of FV Player 8

The 3 CVEs of FV Player 8 →

CVE-2026-95807 The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute… 6.4 Medium CVE-2026-83526 The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,… 8.8 High