Video Conference

video_conference

Vendor: Videowhisper • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2015-9271

1Videowhisper

1Video Conference

Nov 21, 2024

Oct 4, 2018

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905.Show less