Unscored severity · published Sep 9, 2013
CVE-2013-5714
Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VL
Videowhisper Live Streaming Integration · Videowhisper
through 4.25.3; 1.0.2; 2.0; 2.1; 2.2; 4.05; +2 more · source: NVD
Affected product
VL
Videowhisper Live Streaming Integration
Videowhisper
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5714
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5714
Exploit
http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html
osvdb.org
http://osvdb.org/96593
Vendor Advisory
http://secunia.com/advisories/54619
Exploit
http://www.iedb.ir/exploits-402.html
www.securityfocus.com
http://www.securityfocus.com/bid/61977
More from Videowhisper Live Streaming Integration
9.8
CVE-2023-25699
WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)
8.8
CVE-2025-48255
WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability
6.1
CVE-2014-2297
Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web…
5.4
CVE-2024-12504
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
–
CVE-2014-1908
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress…