Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP 4.29.6

  • Severity: medium-risk
  • Status: Fixed
  • Publication: February 26, 2014

The VideoWhisper Live Streaming Integration plugin for WordPress has multiple security issues that allow people to insert malicious code into webpages. This malicious code could do things like steal information or corrupt websites. It affects version 4.29.6 of the plugin. It can be done by changing the n parameter in ls/htmlchat.php or by changing the bgcolor parameter in ls/index.php. This is similar to a security issue that was already solved in 2014.

Detected in:

Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP fixed vulnerable versions: >= * <= 4.29.6
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.