← Back

CVE-2011-4568

nvd nist
Published: Nov 29, 2011Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.

Affected (26)

1 product
Fv Wordpress Flowplayer Plugin
Configuration A
26 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foliovision
Up to 1.12.11
Version 0.9.12
Version 0.9.13
Version 0.9.14
Version 0.9.15
Version 0.9.16
Version 0.9.18
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0
Version 1.1.0
Version 1.2.0
Version 1.2.10
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2.6
Version 1.2.7
Version 1.2.8
Version 1.2.9
Running on/withPlatform Versions
Wordpress
Wordpress
All versions

Timeline

No history available yet.