WordPress VideoWhisper Live Streaming Integration Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	65876
Class:	Input Validation Error
CVE:	CVE-2014-1906
Remote:	Yes
Local:	No
Published:	Feb 27 2014 12:00AM
Updated:	Feb 27 2014 12:00AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:	VideoWhisper VideoWhisper Live Streaming Integration 4.27.3
Not Vulnerable:	VideoWhisper VideoWhisper Live Streaming Integration 4.29.5

WordPress VideoWhisper Live Streaming Integration Multiple Cross Site Scripting Vulnerabilities

To exploit these issues an attacker must entice an unsuspecting victim to open a malicious URI.

The following example data is available:

• /data/vulnerabilities/exploits/65876.txt

WordPress VideoWhisper Live Streaming Integration Multiple Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress VideoWhisper Live Streaming Integration Multiple Cross Site Scripting Vulnerabilities

References:

• Multiple Vulnerabilities in VideoWhisper Live Streaming Integration WP Plugin (High-Tech Bridge SA)
  
• VideoWhisper Live Streaming Integration Homepage (WordPress)