Lucene search
K

32 matches found

Patchstack
Patchstack
added 2023/11/29 12:0 a.m.14 views

WordPress Automatic Youtube Video Posts Plugin Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Automatic Youtube Video Posts Plugin Type Plugin Vulnerable versions = 5.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-49180 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2f23eed8b8ab Credits...

5.9CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/08/18 12:0 a.m.15 views

WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-66917)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plug-in. Video Posts Webcam Recorder WordPress versions...

5.4CVSS0.6AI score0.00368EPSS
Exploits2References1
OSV
OSV
added 2021/08/16 11:15 a.m.2 views

CVE-2021-24512

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting XSS vulnerability in one of the administrative functions for handling deletion of videos...

5.4CVSS5.6AI score
Exploits0References1
CVE
CVE
added 2021/08/16 10:48 a.m.49 views

CVE-2021-24512

Affected software: WordPress plugin Video Posts Webcam Recorder (before 3.2.4). Issue: authenticated reflected XSS in an admin function that handles video deletion; root cause is that input parameters were not validated/escaped. Impact: XSS in admin context; requires authentication. Mitigation: u...

5.4CVSS5.3AI score0.00368EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2021/08/16 10:48 a.m.12 views

CVE-2021-24512 Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting XSS vulnerability in one of the administrative functions for handling deletion of videos...

5.5AI score0.00368EPSS
Exploits2References1
wpexploit
wpexploit
added 2021/07/14 12:0 a.m.160 views

Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS

The plugin has an authenticated reflected cross site scripting XSS vulnerability in one of the administrative functions for handling deletion of videos. .../wp-content/plugins/video-posts-webcam-recorder/posts/videowhisper/recordedvideos.php?delete=%3Cscript%3Ealert1%3C/script%3E...

3.5CVSS1.1AI score0.00368EPSS
Exploits2
wpexploit
wpexploit
added 2014/08/01 12:0 a.m.11 views

Video Posts Webcam Recorder < 1.55.5 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Video Posts Webcam Recorder WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability. https://example.com/wp-content/plugins/video-posts-webcam-recorder/posts/videowhisper/rlogout.php?message=message'//...

4.3CVSS1.4AI score0.00174EPSS
Exploits2References2
NVD
NVD
added 2014/07/02 6:55 p.m.12 views

CVE-2014-4568

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

4.3CVSS5.8AI score0.00174EPSS
Exploits2References2
Prion
Prion
added 2014/07/02 6:55 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

4.3CVSS6.3AI score0.00174EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2014/07/02 6:0 p.m.20 views

CVE-2014-4568

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

5.8AI score0.00174EPSS
Exploits2References2
CVE
CVE
added 2014/07/02 6:0 p.m.79 views

CVE-2014-4568

The CVE-2014-4568 entry refers to a Cross-Site Scripting (XSS) vulnerability in the Video Posts Webcam Recorder WordPress plugin. Affected is version 1.55.4 and earlier, with the issue located in posts/videowhisper/r_logout.php where the message parameter can be exploited to inject arbitrary web ...

4.3CVSS6AI score0.00174EPSS
Exploits2References2Affected Software1
Patchstack
Patchstack
added 2014/06/23 12:0 a.m.17 views

WordPress Video Posts Webcam Recorder Plugin <= 1.55.4 - XSS

Because of this vulnerability in posts/videowhisper/rlogout.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

4.3CVSS2AI score0.00174EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder