medium6.6
CVE-2022-25607
Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727…
Impact
Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foliovision | Fv Flowplayer Video Player | through 7.5.15.727 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-15-727-sql-injection-sqli-vulnerability
- https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers
- https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-15-727-sql-injection-sqli-vulnerability
- https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers