CVE-2026-122664: WordPress Broadcast Live Video plugin <= 7.3.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Reflected XSS.This issue affects Broadcast Live Video: from n/a through 7.3.14.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
videowhisper-live-streaming-integrationto a version that resolves this vulnerability.Fixed in 7.3.15
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The vector is network-accessible and requires no privileges, but exploitation requires user interaction. The available data identifies it as reflected XSS.
Which plugin versions are affected?
Broadcast Live Video versions through 7.3.14 are affected. The data does not identify a fixed version.
What impact could successful exploitation have?
The supplied severity vector indicates low impact to confidentiality, integrity, and availability, with scope changed. A successful reflected XSS attack could affect a user who interacts with attacker-controlled content.