{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fv-flowplayer-video-player-n/a-through-7.5.56.7212/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:foliovision:fv_flowplayer_video_player:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-121764"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FV Flowplayer Video Player (n/a through 7.5.56.7212)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FolioVision"],"content_html":"\u003cp\u003eCVE-2026-121764 identifies a Stored Cross-site Scripting (XSS) vulnerability in the FolioVision FV Flowplayer Video Player plugin for WordPress. The issue arises from improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 7.5.56.7212.\u003c/p\u003e\n","date_modified":"2026-11-09T11:39:43Z","date_published":"2026-11-09T11:39:43Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fv-flowplayer-xss/","summary":"The FolioVision FV Flowplayer Video Player plugin for WordPress contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.","title":"FolioVision FV Flowplayer Video Player: Stored Cross-site Scripting (CVE-2026-121764)","url":"https://feed.craftedsignal.io/briefs/2026-11-fv-flowplayer-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - FV Flowplayer Video Player (N/a Through 7.5.56.7212)","version":"https://jsonfeed.org/version/1.1"}