CVE-2014-4567: XSS
Cross-site scripting (XSS) vulnerability in comments/videowhisper2/rlogout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4567?
CVE-2014-4567 has a medium severity rating due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2014-4567?
To fix CVE-2014-4567, update the Video Comments Webcam Recorder plugin to the latest version beyond 1.55.
Who is affected by CVE-2014-4567?
CVE-2014-4567 affects users of the Video Comments Webcam Recorder plugin version 1.55 or earlier installed on WordPress.
What are the implications of CVE-2014-4567?
Exploitation of CVE-2014-4567 can lead to unauthorized script execution within the context of a user's web session.
Can CVE-2014-4567 be exploited remotely?
Yes, CVE-2014-4567 can be exploited remotely by attackers through the message parameter.