Web Cam

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-6540 Jun 26, 03:15 MEDIUM This Month

Stored cross-site scripting in the Web Cam plugin for WordPress up to version 1.0 enables authenticated attackers (Contributor+) to inject arbitrary JavaScript via the slug parameter, affecting users who view injected pages. No active exploitation or public proof-of-concept has been identified, and EPSS indicates low exploitation probability (0.05%).

WordPress XSS Web Cam Wordpress Plugin

NVD

CVSS 3.1

6.4

EPSS

0.0%

CVE-2025-6540

EPSS 0% CVSS 6.4

MEDIUM This Month

Stored cross-site scripting in the Web Cam plugin for WordPress up to version 1.0 enables authenticated attackers (Contributor+) to inject arbitrary JavaScript via the slug parameter, affecting users who view injected pages. No active exploitation or public proof-of-concept has been identified, and EPSS indicates low exploitation probability (0.05%).

WordPress XSS Web Cam +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy