Description
Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.22.
Problem types
Improper Control of Generation of Code ('Code Injection')
Product status
Any version
Credits
Luciano Hanna | Patchstack Bug Bounty Program
References
vdp.patchstack.com/...emote-code-execution-rce-vulnerability