CVE-2011-4568 – FV Flowplayer Video Player <= 1.2.11 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2011-4568

22 Jul 2011 — Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en view/frontend-head.php en el complemento Flowplayer antes de v1.2.12 para WordPress, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través de la URI. • http://plugins.trac.wordpress.org/changeset?reponame=&new=413607%40fv-wordpress-flowplayer&old=409594%40fv-wordpress-flowplayer • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •