CVE-2018-0642: Foliovision Fv Flowplayer Video Player

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Foliovision Fv Flowplayer Video Player: from 6.1.2, up to and including 6.6.4

Published 2018-09-07. Last modified 2026-06-17.