Video Posts Webcam Recorder < 3.2.4 - Cross-Site Scripting
medium
The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has a reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of videos.
- CVSS:
- 6.1
- Affected:
- up to 3.2.4
- Fixed in:
- 3.2.4
- Disclosed:
- Jul 14, 2021
CVE-2021-24512 on NVD →
Video Posts Webcam Recorder <= 1.55.4 - Reflected Cross-Site Scripting
medium
Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
- CVSS:
- 6.1
- Affected:
- up to 1.55.4
- Fixed in:
- 1.55.5
- Disclosed:
- Jun 12, 2014
CVE-2014-4568 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database