VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2014· Updated Jun 17, 2026

CVE-2014-2715

CVE-2014-2715

Description

Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the (1) module or (2) message parameter to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Videowhisper/Videowhisper4 versions
    cpe:2.3:a:videowhisper:videowhisper:7.x-1.0:*:*:*:*:drupal:*:*+ 3 more
    • cpe:2.3:a:videowhisper:videowhisper:7.x-1.0:*:*:*:*:drupal:*:*
    • cpe:2.3:a:videowhisper:videowhisper:7.x-1.1:*:*:*:*:drupal:*:*
    • cpe:2.3:a:videowhisper:videowhisper:7.x-1.3:*:*:*:*:drupal:*:*
    • cpe:2.3:a:videowhisper:videowhisper:7.x-1.x:dev:*:*:*:drupal:*:*
  • Drupal/VideoWhisper Webcamllm-create
    Range: 7.x

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.