Broadcast Live Video: Cross-site request forgery
Broadcast Live Video is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
- Component
- Broadcast Live Video
- Plugin slug
videowhisper-live-streaming-integration- Affected
- See vendor advisory
- Safe version
- See mitigation notes
- Published
- May 19, 2025
This CVE was published May 19, 2025 and is one of 13 known issues for this plugin.
Patch or disable the affected component.
Update Broadcast Live Video to a release outside the affected range, or disable and remove it until a fixed version is available.
Technical description
Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects Broadcast Live Video: from n/a through <= 6.2.4.
CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
NVD vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H