Advisories · Technology

foliovision FV Player 8.

Every CVE that names foliovision FV Player 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-95807 CVE record

CVSS 6.4 Medium

FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
- foliovision FV Player 8
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2026
CVE-2026-42699 CVE record

CVSS 7.1 High

WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
- FolioVision FV Player 8
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2026-83526 CVE record

CVSS 8.8 High

FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter
- foliovision FV Player 8
- Unrestricted file upload
Not analysed yet 10 Oct 2026