CVE-2011-4568: Foliovision Fv WordPress Flowplayer Plugin

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.

Affected products

• Foliovision Fv WordPress Flowplayer Plugin: up to and including 1.12.11; version 0.9.12 only; version 0.9.13 only; version 0.9.14 only; version 0.9.15 only; version 0.9.16 only; …

Published 2011-11-29. Last modified 2026-06-16.