Vulnerabilities > Videowhisper > Videowhisper Live Streaming Integration

DATE CVE VULNERABILITY TITLE RISK
2018-03-19 CVE-2014-2297 Cross-site Scripting vulnerability in Videowhisper Live Streaming Integration 4.29.6
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to ls/htmlchat.php or (2) bgcolor parameter to ls/index.php.
network
low complexity
videowhisper CWE-79
6.1
6.1