Lucene search
+L

1 matches found

Drupal
Drupal
added 2014/06/18 12:0 a.m.34 views

SA-CONTRIB-2014-061 - VideoWhisper Webcam Plugins - Cross Site Scripting (XSS) - Unsupported

Includes multiple modules for video communications including room listing, pay per view access control. The module doesn't sufficiently filter user supplied text from the url reflected cross site scripting. No special permissions are required to exploit this issue. There are no mitigating factors...

4.3CVSS6.5AI score0.01158EPSS
SaveExploits1References10
Rows per page
Query Builder