CVE-2014-4570

MEDIUM 4.3CVE-2014-4570 · Published 02/07/2014 · updated 17/06/2026

In short

CVE-2014-4570 is a MEDIUM (CVSS 4.3) vulnerability affecting video presentation (videowhisper).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
video presentation videowhisper	`≤ 3.25`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to c_login.php or (2) room parameter to index.php in vp/.

References

codevigilant.com/disclosure/wp-plugin-videowhisper-video-presentation-a3-cross-site-scripting-xss · Exploit
securityfocus.com/bid/69511 · Exploit
plugins.trac.wordpress.org/changeset

CVE-2014-4570

In short

Description

References

More vulnerabilities in video presentation

CVE-2014-4570

In short

Description

References

More vulnerabilities in video presentation