CVE-2014-4568
NONE EPSS 73.1%
Published Jul 2, 201412y ago · Modified Jun 17, 20262w ago
Published Jul 2, 2014 12y ago
Last Modified Jun 17, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Threat Intelligence
EPSS Exploit Probability
73.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| videowhisper | video_posts_webcam_recorder | * | ≤1.55.4 |
References 2
- codevigilant.com http://codevigilant.com/disclosure/wp-plugin-video-posts-webcam-recorder-a3-cross-site-scripting-xss
- plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839990%40video-posts-webcam-recorder&old=686450%40video-posts-webcam-recorder&sfp_email=&sfph_mail=
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.