Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: videowhisper Component: Video Posts Webcam Recorder Clear all filters
TI-2021-06799 CVE-2021-24512 · GHSA-85mg-8wwj-pj2x

Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS

Priority LOW 25

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of videos.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2021-08-16 Fixed in 3.2.4 CWE-79
TI-2014-03754 CVE-2014-4568 · GHSA-43h4-6cw6-2rm4

Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01618 Published 2014-07-02 No fix listed CWE-79