CVE-2014-2297: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

PT-2018-4197

Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration plugin version 4.29.6 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the n parameter to...

CVE-2013-5714

The CVE-2013-5714 entry concerns the VideoWhisper Live Streaming Integration WordPress plugin (versions 4.25.3 and earlier) with XSS in ls/htmlchat.php. An attacker can inject arbitrary script via the name or message parameter, enabling remote XSS. Documented impact is client-side script executio...