« Volver al listado

CVE-2013-5714

Estado: ModificadaMedia (4.3)—

Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter. NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Videowhisper — Videowhisper Live Streaming Integration

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5714",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-09-09T17:55:06.297",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/96593",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/54619",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iedb.ir/exploits-402.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/61977",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/96593",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54619",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iedb.ir/exploits-402.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/61977",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Multiples vulnerabilidades cross-site scripting (XSS) en ls/htmlchar.php de la extensión para WordPress, VideoWhisper Live Streaming Integration 4.25.3 y posiblemente anteriores permite a un atacate remoto inyectar script web o HTML a discrección a través del parámetro (1) name o (2) message. NOTA: algunos de esos detalles son obtenidos de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T23:59:17.737",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A32796C9-82D9-4BBD-BF37-96AD52077113",
              "versionEndIncluding": "4.25.3"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BEFA846-DA14-40D2-A419-2721EA80A771"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15F32C19-2034-4868-8AA0-C6B49AAE5921"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E85379E4-6948-426A-8BF8-92DEEC6D24F9"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20EF403D-B594-40BA-984E-CFACE36BEB55"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B13C2E4-3517-4080-AF5E-56B1B7ED8550"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.07:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64353A4D-E281-45A1-B685-6B8577AACC45"
            },
            {
              "criteria": "cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A16718A-F643-40E0-B0C6-B5C88F600989"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}