WordPress Plugin Vulnerabilities

AVChat Video Chat 1.4.1 - index_popup.php Multiple Parameters Reflected XSS

Description

The Community Lite Video Chat WordPress plugin was affected by an index_popup.php Multiple Parameters Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
avchat-3
Fixed in 1.4.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
fce99c82-3958-4c17-88d3-6e8fa1a11e59

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2023-08-23
Title
Radio Station < 2.5.0 - Reflected XSS
Published
2025-01-10
Title
Woo UPS Pickup < 2.6.6 - Reflected XSS
Published
2025-12-30
Title
CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting
Published
2017-02-19
Title
Time Sheets < 1.5.2 - Multiple XSS
Published
2016-04-12
Title
Hero Maps Pro <= 2.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)