CVE-2021-24512

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting XSS vulnerability in one of the administrative functions for handling deletion of videos...

CVE-2021-24512

Affected software: WordPress plugin Video Posts Webcam Recorder (before 3.2.4). Issue: authenticated reflected XSS in an admin function that handles video deletion; root cause is that input parameters were not validated/escaped. Impact: XSS in admin context; requires authentication. Mitigation: u...