NVD

Id
30442  
Name
CVE-2014-1906  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) m parameter to lb_status.php; (2) msg parameter to vc_chatlog.php; n parameter to (3) channel.php, (4) htmlchat.php, (5) video.php, or (6) videotext.php; (7) message parameter to lb_logout.php; or ct parameter to (8) lb_status.php or (9) v_status.php in ls/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-03-06  
Modified Date
2014-03-07  
Seq
2014-1906  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161065 30442 CVE-2014-1906 http://packetstormsecurity.com/files/125454  View
161066 30442 CVE-2014-1906 videowhisper-cve20141906-xss(91477)  View
161067 30442 CVE-2014-1906 https://www.htbridge.com/advisory/HTB23199  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12702 JVNDB-2014-001577 WordPress 用 VideoWhisper Live Streaming Integration プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 VideoWhisper Live Streaming Integration プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-1906 69193 CVE-2014-1906 30442 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001577.html 2014-02-27 2014-03-07 View