Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS
Priority LOW 25CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of videos.
Why it matters now
EPSS 0.0062 49th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Video Posts Webcam Recorder (Unknown): 3.2.4
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | Video Posts Webcam Recorder | 3.2.4 to before 3.2.4 | 3.2.4 | Patch available | CNA |
- Video Posts Webcam Recorder VendorUnknown Affected 3.2.4 to before 3.2.4 Fixed in 3.2.4 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:videowhisper:video_posts_webcam_recorder:*:*:*:*:*:wordpress:*:* | before 3.2.4 | Vulnerable | videowhisper |
- cpe:2.3:a:videowhisper:video_posts_webcam_recorder:*:*:*:*:*:wordpress:*:* Versions before 3.2.4 Vulnerable ·videowhisper
Remediation
- Fix · CNA Video Posts Webcam Recorder (Unknown) Fixed in 3.2.4
Timeline
- 2026-10-02 Threatist record created from CVE-2021-24512
- 2026-10-03 Alias added: GHSA-85mg-8wwj-pj2x
References
More videowhisper Video Posts Webcam Recorder vulnerabilities
- TI-2014-03754 Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2021-24512 · CVE Program
- CVE-2021-24512 · NVD
- FIRST EPSS
- GHSA-85mg-8wwj-pj2x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences