Webcam 2Way Videochat Vulnerabilities

[en] The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` function found in the ~/inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7.

Affected:

up to 5.2.8

Fixed in:

5.2.8

Disclosed:

Aug 16, 2021

CVE-2021-34656 on NVD →

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` function found in the ~/inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7.

CVSS:

6.1

Affected:

up to 5.2.7

Fixed in:

5.2.8

Disclosed:

Aug 13, 2021

CVE-2021-34656 on NVD →

The Webcam 2Way Videochat plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 4.41 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:

6.1

Affected:

up to 4.41

Fixed in:

4.41.2

Disclosed:

Sep 17, 2014

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.

Affected:

up to 4.42

Fixed in:

4.42

Disclosed:

Sep 17, 2014

The Webcam 2Way Videochat plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 4.41 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser.

Affected:

up to 4.41.2

Fixed in:

4.41.2

Disclosed:

Sep 17, 2014

The 2Way VideoCalls – HTML5 Webcam Videochat WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 4.41.2

Fixed in:

4.41.2