CVE-2026-88874: Exposure of Sensitive Information to an Unauthorized Actor

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 does not enforce the Live stream password check on the stats endpoint or on the HLS origin. Live::getStats plugin/Live/Live.php returns a password-protected transmission's RTMP stream key, its isPasswordProtected...

CVE-2026-4074: Improper Neutralization of Input During Web Page Generation

The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to, and including, 1.0.3. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes. Th...

EUVD-2012-5268

Malware in sbrugna...

CVE-2012-5346

Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-5346

The CVE-2012-5346 entry concerns the WordPress WP Live.php plugin (version 1.2.1) with a Cross‑Site Scripting (XSS) flaw triggered by the s parameter in wp-live.php. This allows remote attackers to inject arbitrary scripts/HTML in the victim’s browser. Several connected sources corroborate the XS...

CVE-2012-5346

Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-5346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...

WordPress WP Live.php Plugin 1.2.1 - Cross Site Scripting

WordPress WP Live.php plugin's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WP Live.php <= 1.2.1 - Cross-Site Scripting (XSS)

The WP Live.php WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Unfixed XSS vulnerability at www.freetv.pk

Security researcher autoexec trojan, has submitted on 19/09/2011 a cross-site-scripting XSS vulnerability affecting www.freetv.pk, which at the time of submission ranked 109154 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...