CVE-2026-49773 Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions

Description

Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.

Affected products and versions

Product	Affected versions	Fixed in
FV Flowplayer Video Player 7.5	earliest → < 7.5.51.7212	7.5.51.7212

Other CVEs of FV Flowplayer Video Player

The 20 CVEs of FV Flowplayer Video Player →

CVE-2026-109984 The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment'… 5.4 Medium CVE-2026-110533 The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium CVE-2026-110001 The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment… 5.4 Medium CVE-2026-118079 Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows… 7.2 High