CVE-2014-4569

NONE EPSS 78.9%
Published Jul 1, 201412y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jul 1, 2014 12y ago
Last Modified Jun 17, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the room_name parameter.

Threat Intelligence

EPSS Exploit Probability
78.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 9

VendorProductVersionRange
videowhispervideowhisper_live_streaming_integration* ≤4.27
videowhispervideowhisper_live_streaming_integration1.0.2any
videowhispervideowhisper_live_streaming_integration2.0any
videowhispervideowhisper_live_streaming_integration2.1any
videowhispervideowhisper_live_streaming_integration2.2any
videowhispervideowhisper_live_streaming_integration4.05any
videowhispervideowhisper_live_streaming_integration4.07any
videowhispervideowhisper_live_streaming_integration4.25any
videowhispervideowhisper_live_streaming_integration4.27.2any

References 3

  • codevigilant.com http://codevigilant.com/disclosure/wp-plugin-videowhisper-live-streaming-integration-a3-cross-site-scripting-xss
    Exploit
  • securityfocus.com http://www.securityfocus.com/bid/68321
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=833654%40videowhisper-live-streaming-integration&old=833649%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail=
    ExploitPatch

Remediation

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=833654%40videowhisper-live-streaming-integration&old=833649%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail=
    ExploitPatch