FolioVision FV Flowplayer Video Player: Stored Cross-site Scripting (CVE-2026-121764)
The FolioVision FV Flowplayer Video Player plugin for WordPress contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.
CVE search metadata
CVE search record: CVE-2026-121764. Severity: high. CVSS: 7.1. KEV: no. Product: FV Flowplayer Video Player (n/a through 7.5.56.7212). Brief: FolioVision FV Flowplayer Video Player: Stored Cross-site Scripting (CVE-2026-121764). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fv-flowplayer-xss/
Triage facts
Revision 1- Applicability
- FV Flowplayer Video Player (n/a through 7.5.56.7212)
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 11:39 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-121764 identifies a Stored Cross-site Scripting (XSS) vulnerability in the FolioVision FV Flowplayer Video Player plugin for WordPress. The issue arises from improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 7.5.56.7212.