CVE-2014-4570

NONE EPSS 78.6%
Published Jul 2, 201412y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jul 2, 2014 12y ago
Last Modified Jun 17, 2026 2w ago

Description

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.

Threat Intelligence

EPSS Exploit Probability
78.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
videowhispervideo_presentation* ≤3.25

References 3

  • codevigilant.com http://codevigilant.com/disclosure/wp-plugin-videowhisper-video-presentation-a3-cross-site-scripting-xss
    Exploit
  • securityfocus.com http://www.securityfocus.com/bid/69511
    Exploit
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839980%40videowhisper-video-presentation&old=600781%40videowhisper-video-presentation&sfp_email=&sfph_mail=#file4

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.