Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-07-02T18:00:00
Updated: 2015-05-12T14:57:00
Reserved: 2014-06-23T00:00:00
Link: CVE-2014-4570
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-07-02T18:55:09.567
Modified: 2015-08-28T16:34:17.277
Link: CVE-2014-4570
JSON object: View
Redhat Information
No data.
CWE