CVE-2021-24512

Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of videos.

Affected

Video Posts Webcam Recorder

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.62% chance of exploitation in the next 30 days, 49th percentile

Published

2021-08-16

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/458a576e-a7ed-4758-a80c-cd08c370aaf4

References

• CVE Record
• NVD entry