CVE-2024-9897
Published
CVSS v3
6.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-twitch-embed shortcode in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
<p>Embed Twitch streams with our collection of Twitch Blocks and Shortcodes. Works with Block Editor, Classic Editor, and Page Builders.</p>
<h3>The most advanced Twitch plugin for WordPress</h3>
<p>For over 8 years, <a href="https://www.streamweasels.com?utm_source=wordpress&utm_medium=twitch-integration&utm_campaign=readme" rel="nofollow ugc">StreamWeasels</a> have been helping thousands of WordPress websites <strong>display twitch streams in their WordPress websites</strong>.</p>
<p>StreamWeasels Twitch Integration is the latest and greatest plugin from StreamWeasels that <strong>takes Twitch Integration to the next level</strong>.</p>
<p>This plugin allows you to <strong>display twitch streams anywhere on your website</strong> in a variety of unique and professional-looking layouts.</p>
<h3>Embed a Single Twitch Stream based on Channel</h3>
<p>StreamWeasels Twitch Integration allows you to embed a single Twitch stream anywhere on your website with our easy-to-use Gutenberg block or shortcode.</p>
<ul>
<li>Embed a single stream with the following shortcode: [sw-embed channel=”lirik”]</li>
<li>No Twitch API connection required for a single stream embed</li>
<li>Customise your embed with the following options:</li>
<li>Autoplay</li>
<li>Start Muted</li>
<li>Embed Chat</li>
<li>Colour Theme</li>
<li>Embed Width</li>
<li>Embed Height</li>
</ul>
<h3>Display Twitch Streams by Game, Channel List, Team and more</h3>
<p>StreamWeasels Twitch Integration allows you to display groups of streams from Twitch based on Games, Channels, Teams, Languages, Titles and more.</p>
<ul>
<li>Embed a group of streams with the following shortcode: [sw-twitch channels=”monstercat,lirik,sodapoppin”]</li>
<li>Twitch API connection required for a group of streams embed</li>
<li>Display upto 1000 streamers playing a specific <strong>Game</strong>.</li>
<li>Display upto 1000 streamers from a specified <strong>List of Channels</strong>.</li>
<li>Display upto 1000 streamers from a specific <strong>Twitch Team</strong>.</li>
<li>Display only streams with a specific <em>tag</em> in the <strong>Stream Title</strong>.</li>
<li>Display streams in a <strong>specific language</strong> only.</li>
</ul>
<h3>Advanced Combinations</h3>
<p>You can combine our options for some very powerful Twitch Integrations.</p>
<ul>
<li>Display all streamers from a <strong>Twitch Team</strong> only if they are playing a specific <strong>Game</strong>.</li>
<li>Display all streamers from a <strong>List of Channels</strong> only if they are playing a specific <strong>Game</strong>.</li>
<li>Display all streamers playing a specific <strong>Game</strong> but only if they have a specific <strong>Tag</strong> in their <strong>Stream Title</strong>.</li>
</ul>
<h3>Examples</h3>
<p>Here are some real examples from some of the many StreamWeasels Twitch Integration users.</p>
<ul>
<li>Display all users from a <strong>Twitch Team</strong> but only if they’re playing <strong>League of Legends</strong>.</li>
<li>Display 100 <strong>GTA V</strong> Streamers but only if they have <em>NoPixel</em> in their <strong>Stream Title</strong>.</li>
<li>Display all users from a <strong>Twitch Team</strong> but only if they have <em>#LGBTQ+</em> in their <strong>Stream Title</strong>.</li>
<li>Display all streamers playing <strong>Music</strong> but only if they have <em>Requests</em> in their <strong>Stream Title</strong>.</li>
</ul>
<h3>Layouts</h3>
<p>The best part about StreamWeasels Twitch Integration is our library of <strong>Add-on Plugins</strong>. Our <strong>free</strong> Add-ons allow you to unlock a variety of different layouts for your Twitch streams.</p>
<h3>Free Layouts</h3>
<ul>
<li><a href="https://wordpress.org/plugins/ttv-easy-embed-wall/" rel="ugc">[Layout] Twitch Wall</a>. Display a large number of streams all on one page, just like Twitch.</li>
<li><a href="https://wordpress.org/plugins/ttv-easy-embed-player/" rel="ugc">[Layout] Twitch Player</a>. Display a any number of streams in a small space, with a scrolling sidebar and space for the embed.</li>
<li><a href="https://wordpress.org/plugins/ttv-easy-embed/" rel="ugc">[Layout] Twitch Rail</a>. Display a large number of streams in a tiny space, with the ability to swipe left and right.</li>
<li><a href="https://wordpress.org/plugins/stream-status-for-twitch/" rel="ugc">[Layout] Twitch Status</a>. Simply display your Twitch live status on every page of your website.</li>
<li><a href="https://www.streamweasels.com/product/twitch-vods/?utm_source=wordpress&utm_medium=twitch-integration&utm_campaign=readme" rel="nofollow ugc">[Layout] Twitch Vods</a>. The easiest way to display Twitch VODS on your website.</li>
</ul>
<h3>PRO Layouts</h3>
<ul>
<li><a href="https://www.streamweasels.com/product/twitch-feature/?utm_source=wordpress&utm_medium=twitch-integration&utm_campaign=readme" rel="nofollow ugc">[Layout] Twitch Feature</a>. Slick, professional-style layout inspired by the Twitch homepage.</li>
<li><a href="https://www.streamweasels.com/product/twitch-nav/?utm_source=wordpress&utm_medium=twitch-integration&utm_campaign=readme" rel="nofollow ugc">[Layout] Twitch Nav</a>. The easiest way to display Twitch status in your main navigation.</li>
<li><a href="https://www.streamweasels.com/product/twitch-showcase/?utm_source=wordpress&utm_medium=twitch-integration&utm_campaign=readme" rel="nofollow ugc">[Layout] Twitch Showcase</a>. Professional eSports-inspired layout.</li>
</ul>
<h3>Read More</h3>
<p>If you want to learn more about StreamWeasels Twitch Integration, check out these links.</p>
<ul>
<li><a href="https://support.streamweasels.com/article/22-getting-started-with-twitch-integration" rel="nofollow ugc">Twitch Integration – Getting Started Guide</a></li>
<li><a href="https://www.youtube.com/channel/UCo885jUiOeyhtHDFUbdx8rQ" rel="nofollow ugc">Check out our YouTube Guides</a></li>
<li><a href="https://twitter.com/StreamWeasels" rel="nofollow ugc">Follow us on Twitter</a></li>
<li><a href="https://discord.com/invite/HSwfPbm" rel="nofollow ugc">Join us on Discord</a></li>
<li><a href="https://www.streamweasels.com/contact/" rel="nofollow ugc">Need Help? Get in touch!</a></li>
</ul>