CVE-2024-10184
Published
CVSS v3
6.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-kick-embed shortcode in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
<p>StreamWeasels Kick Integration for embedding live streams from Kick</p>
<h3>The most advanced Kick plugin for WordPress</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/YcI3ovezk1I?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>For over 8 years, <a href="https://www.streamweasels.com?utm_source=wordpress&utm_medium=kick-integration&utm_campaign=readme" rel="nofollow ugc">StreamWeasels</a> have been helping thousands of WordPress websites <strong>display Twitch and YouTube content streams in their WordPress websites, and now we’re brining Kick streams to WordPress.</strong>.</p>
<p>StreamWeasels Kick Integration is the latest and greatest plugin from StreamWeasels that <strong>takes Kick Integration to the next level</strong>.</p>
<p>This plugin allows you to <strong>display kick streams anywhere on your website</strong> in a variety of unique and professional-looking layouts.</p>
<h3>Embed a Single Kick Stream based on Channel</h3>
<p>StreamWeasels Kick Integration allows you to embed a single Kick stream anywhere on your website with our easy-to-use Gutenberg block or shortcode.</p>
<ul>
<li>Embed a single stream with the following shortcode: [sw-kick-embed channel=”xqc”]</li>
<li>Customise your embed with the following options:</li>
<li>Autoplay</li>
<li>Start Muted</li>
<li>Embed Width</li>
<li>Embed Height</li>
</ul>
<h3>Display Multiple Kick Streams using Kick Wall</h3>
<p>Embed multiple Kick streams at once in a Kick Wall.</p>
<ul>
<li>Embed a group of streams with the following shortcode: [sw-kick layout=”wall” channels=”xqc,roshtein,amouranth”]</li>
<li>Change the number of streams to display, the number of columns in the wall and the column spacing.</li>
<li>Unlock more than 30 other customisations and settings with an <a href="https://www.streamweasels.com/kick-wordpress-plugins/kick-integration-pro/?utm_source=wordpress&utm_medium=kick-integration&utm_campaign=readme" rel="nofollow ugc">Essentials or PRO upgrade</a>.</li>
</ul>
<h3>Display your Kick online status using Kick Status</h3>
<p>Let your website users know whenever you’re live on Kick with Kick status.</p>
<ul>
<li>Add the Kick Status widget with the following shortcode: [sw-kick layout=”status” channel=”xqc”]</li>
<li>Change the size, placement and colours of the Kick Status widget.</li>
<li>Unlock more than 30 other customisations and settings with an <a href="https://www.streamweasels.com/kick-wordpress-plugins/kick-integration-pro/?utm_source=wordpress&utm_medium=kick-integration&utm_campaign=readme" rel="nofollow ugc">Essentials or PRO upgrade</a>.</li>
</ul>
<h3>Showcase your top Kick streams with Kick Feature</h3>
<p>Showcase a group of Kick streams and display them front-and-center on your website with Kick Feature (PRO only).</p>
<ul>
<li>Add the Kick Feature layout with the following shortcode: [sw-kick layout=”feature” channels=”xqc,roshtein,amouranth”]</li>
<li>Change the position and colours of the layout.</li>
<li>Unlock this layout and more than 30 other customisations and settings with a <a href="https://www.streamweasels.com/kick-wordpress-plugins/kick-integration-pro/?utm_source=wordpress&utm_medium=kick-integration&utm_campaign=readme" rel="nofollow ugc">PRO upgrade</a>.</li>
</ul>
<h3>Read More</h3>
<p>If you want to learn more about StreamWeasels Kick Integration, check out these links.</p>
<ul>
<li><a href="https://support.streamweasels.com/article/79-getting-started-with-kick-integration" rel="nofollow ugc">Kick Integration – Getting Started Guide</a></li>
<li><a href="https://www.youtube.com/channel/UCo885jUiOeyhtHDFUbdx8rQ" rel="nofollow ugc">Check out our YouTube Guides</a></li>
<li><a href="https://twitter.com/StreamWeasels" rel="nofollow ugc">Follow us on Twitter</a></li>
<li><a href="https://discord.com/invite/HSwfPbm" rel="nofollow ugc">Join us on Discord</a></li>
<li><a href="https://www.streamweasels.com/contact/" rel="nofollow ugc">Need Help? Get in touch!</a></li>
</ul>
WordPress Plugin Directory