{"api_version":"1","generated_at":"2026-07-23T23:40:25+00:00","cve":"CVE-2013-5714","urls":{"html":"https://cve.report/CVE-2013-5714","api":"https://cve.report/api/cve/CVE-2013-5714.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-5714","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-5714"},"summary":{"title":"CVE-2013-5714","description":"Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.  NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-09-09 17:55:06","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html","name":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.iedb.ir/exploits-402.html","name":"http://www.iedb.ir/exploits-402.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/61977","name":"http://www.securityfocus.com/bid/61977","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress VideoWhisper Live Streaming Integration Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/54619","name":"http://secunia.com/advisories/54619","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/96593","name":"http://osvdb.org/96593","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5714","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5714","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"4.05","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"4.07","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"4.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"1","versionEndIncluding":"4.25.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videowhisper","cpe5":"videowhisper_live_streaming_integration","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5714","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:22:29.579Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.iedb.ir/exploits-402.html"},{"name":"20130823 Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html"},{"name":"54619","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/54619"},{"name":"61977","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/61977"},{"name":"96593","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/96593"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.  NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-09-09T17:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.iedb.ir/exploits-402.html"},{"name":"20130823 Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html"},{"name":"54619","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/54619"},{"name":"61977","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/61977"},{"name":"96593","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/96593"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-5714","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.  NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.iedb.ir/exploits-402.html","refsource":"MISC","url":"http://www.iedb.ir/exploits-402.html"},{"name":"20130823 Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html"},{"name":"54619","refsource":"SECUNIA","url":"http://secunia.com/advisories/54619"},{"name":"61977","refsource":"BID","url":"http://www.securityfocus.com/bid/61977"},{"name":"96593","refsource":"OSVDB","url":"http://osvdb.org/96593"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-5714","datePublished":"2013-09-09T17:00:00.000Z","dateReserved":"2013-09-09T00:00:00.000Z","dateUpdated":"2024-09-17T01:41:10.859Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-09-09 17:55:06","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:*:*:*:*:*:*:*:*","versionEndIncluding":"4.25.3","matchCriteriaId":"A32796C9-82D9-4BBD-BF37-96AD52077113"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6BEFA846-DA14-40D2-A419-2721EA80A771"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.0:*:*:*:*:*:*:*","matchCriteriaId":"15F32C19-2034-4868-8AA0-C6B49AAE5921"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E85379E4-6948-426A-8BF8-92DEEC6D24F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.2:*:*:*:*:*:*:*","matchCriteriaId":"20EF403D-B594-40BA-984E-CFACE36BEB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.05:*:*:*:*:*:*:*","matchCriteriaId":"6B13C2E4-3517-4080-AF5E-56B1B7ED8550"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.07:*:*:*:*:*:*:*","matchCriteriaId":"64353A4D-E281-45A1-B685-6B8577AACC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.25:*:*:*:*:*:*:*","matchCriteriaId":"4A16718A-F643-40E0-B0C6-B5C88F600989"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*","matchCriteriaId":"A77EB0E7-7FA7-4232-97DF-7C7587D163F1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"5714","Ordinal":"1","Title":"CVE-2013-5714","CVE":"CVE-2013-5714","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"5714","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.  NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2013-5714"},{"CveYear":"2013","CveId":"5714","Ordinal":"2","NoteData":"2013-09-09","Type":"Other","Title":"Published"}]}}}