Lucene search
+L

CVE-2013-1407

🗓️ 13 May 2014 14:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 76 Views🌐 WEB

XSS vulnerabilities in Events Manager and Events Manager Pro plugins for WordPress (CVE-2013-1407)

Related
Detection
Refs
Paths
NVD
Node
OR
netweblogicevents_managerRange≤5.3.4---wordpress
netweblogicevents_managerMatch5.3---wordpress
netweblogicevents_managerMatch5.3.1---wordpress
netweblogicevents_managerMatch5.3.2---wordpress
netweblogicevents_managerMatch5.3.2.1---wordpress
netweblogicevents_managerMatch5.3.3---wordpress
Node
OR
netweblogicevents_manager_proRange≤2.2.7---wordpress
netweblogicevents_manager_proMatch2.2---wordpress
netweblogicevents_manager_proMatch2.2.1---wordpress
netweblogicevents_manager_proMatch2.2.2---wordpress
netweblogicevents_manager_proMatch2.2.3---wordpress
netweblogicevents_manager_proMatch2.2.4---wordpress
netweblogicevents_manager_proMatch2.2.5---wordpress
netweblogicevents_manager_proMatch2.2.6---wordpress
netweblogicevents_manager_proMatch2.2.8---wordpress
ParameterPositionPathDescriptionCWE
scopequery param/index.phpReflected XSS via the 'scope' parameter in the index.php script.CWE-79
_wpnoncequery param/wp-admin/edit.phpReflected XSS via the '_wpnonce' parameter in the wp-admin/edit.php script.CWE-79
user_namequery param/index.phpReflected XSS via 'user_name', 'dbem_phone', and 'user_email' parameters in the index.php script.CWE-79
dbem_phonequery param/index.phpReflected XSS via 'user_name', 'dbem_phone', and 'user_email' parameters in the index.php script.CWE-79
user_emailquery param/index.phpReflected XSS via 'user_name', 'dbem_phone', and 'user_email' parameters in the index.php script.CWE-79
booking_commentrequest body/index.phpReflected XSS via the 'booking_comment' POST parameter in the index.php script.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:51Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.02058
76