VideoWhisper - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/videowhisper/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 16:08:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVideoWhisper Paid Videochat Turnkey Site Reflected Cross-Site Scripting (CVE-2026-111840)https://feed.craftedsignal.io/briefs/2026-10-videowhisper-xss/Wed, 21 Oct 2026 16:08:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-videowhisper-xss/VideoWhisper Paid Videochat Turnkey Site (from n/a through 7.5.14) is vulnerable to Reflected Cross-site Scripting (XSS) due to improper neutralization of input during web page generation.VideoWhisper Paid Videochat Turnkey Site, versions from n/a through 7.5.14, contains a vulnerability identified as Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). This allows for Reflected XSS.

Technical Details

  • Vulnerability Type: Cross-site Scripting (CWE-79)
  • CVSS v3.1 Base Score: 7.1
]]>highadvisory