TI-2011-03934 CVE-2011-4568 · GHSA-7w3j-3pfm-46j3Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer…Priority LOW 24Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0183 · Published 2011-11-29 · No fix listed CWE-79