CVE-2013-10026

🗓️ 02 May 2023 02:00:05Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Vulnerability in Mail Subscribe List Plugin up to 2.0.10 on WordPress allows remote attackers to conduct cross-site scripting via sml_name/sml_email argument manipulation in index.php

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2013-10026	2 May 202307:29	–	circl
CNNVD	Wordpress Plugin Mail Subscribe List 跨站脚本漏洞	2 May 202300:00	–	cnnvd
Cvelist	CVE-2013-10026 Mail Subscribe List Plugin index.php cross site scripting	2 May 202302:00	–	cvelist
EUVD	EUVD-2013-1035	7 Oct 202500:30	–	euvd
NVD	CVE-2013-10026	2 May 202302:15	–	nvd
Prion	Cross site scripting	2 May 202302:15	–	prion
Positive Technologies	PT-2023-10015 · Unknown · Mail Subscribe List Plugin	2 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2013-10026	22 May 202511:20	–	redhatcve

NVD

Vulners

Node

webfwd mail_subscribe_listRange2.0.0–2.0.10wordpress

[
  {
    "vendor": "n/a",
    "product": "Mail Subscribe List Plugin",
    "versions": [
      {
        "version": "2.0.0",
        "status": "affected"
      },
      {
        "version": "2.0.1",
        "status": "affected"
      },
      {
        "version": "2.0.2",
        "status": "affected"
      },
      {
        "version": "2.0.3",
        "status": "affected"
      },
      {
        "version": "2.0.4",
        "status": "affected"
      },
      {
        "version": "2.0.5",
        "status": "affected"
      },
      {
        "version": "2.0.6",
        "status": "affected"
      },
      {
        "version": "2.0.7",
        "status": "affected"
      },
      {
        "version": "2.0.8",
        "status": "affected"
      },
      {
        "version": "2.0.9",
        "status": "affected"
      },
      {
        "version": "2.0.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/wp-plugins/mail-subscribe-list/commit/484970ef8285cae51d2de3bd4e4684d33c956c28
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
sml_name	query param	index.php	Cross-site scripting in Mail Subscribe List Plugin for WordPress via manipulation of sml_name/sml_email parameters in index.php	CWE-79
sml_email	query param	index.php	Cross-site scripting in Mail Subscribe List Plugin for WordPress via manipulation of sml_name/sml_email parameters in index.php	CWE-79

21 Nov 2024 01:48Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.13.5 - 6.1

CVSS 24

CVSS 33.5

EPSS0.00178

CWE-79