Flowplayer Flowplayer Flash — known CVE vulnerabilities

Every CVE whose affected-product data names Flowplayer Flowplayer Flash, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2011-3642 — CVSS 9.6 (critical): Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3…
• CVE-2013-7341 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before…