Lucene search
HistoryMar 03, 2014 - 4:55 p.m.
CVE-2013-1409
cve-2013-1409
cross-site scripting
xss
commentluv
wordpress
vulnerability
web script
html
remote attack
admin-ajax.php
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
84.9%
Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.
Affected configurations
Node
commentluvcommentluvRange≤2.92.3wordpress
ORcommentluvcommentluvMatch2.7wordpress
ORcommentluvcommentluvMatch2.71wordpress
ORcommentluvcommentluvMatch2.74wordpress
ORcommentluvcommentluvMatch2.76wordpress
ORcommentluvcommentluvMatch2.80wordpress
ORcommentluvcommentluvMatch2.81wordpress
ORcommentluvcommentluvMatch2.81.1wordpress
ORcommentluvcommentluvMatch2.81.2wordpress
ORcommentluvcommentluvMatch2.81.3wordpress
ORcommentluvcommentluvMatch2.81.4wordpress
ORcommentluvcommentluvMatch2.81.5wordpress
ORcommentluvcommentluvMatch2.81.6wordpress
ORcommentluvcommentluvMatch2.81.7wordpress
ORcommentluvcommentluvMatch2.81.8wordpress
ORcommentluvcommentluvMatch2.90.1wordpress
ORcommentluvcommentluvMatch2.90.3wordpress
ORcommentluvcommentluvMatch2.90.5wordpress
ORcommentluvcommentluvMatch2.90.6wordpress
ORcommentluvcommentluvMatch2.90.7wordpress
ORcommentluvcommentluvMatch2.90.8wordpress
ORcommentluvcommentluvMatch2.90.8.1wordpress
ORcommentluvcommentluvMatch2.90.8.2wordpress
ORcommentluvcommentluvMatch2.90.8.3wordpress
ORcommentluvcommentluvMatch2.90.9wordpress
ORcommentluvcommentluvMatch2.90.9.1wordpress
ORcommentluvcommentluvMatch2.90.9.2wordpress
ORcommentluvcommentluvMatch2.90.9.3wordpress
ORcommentluvcommentluvMatch2.90.9.4wordpress
ORcommentluvcommentluvMatch2.90.9.5wordpress
ORcommentluvcommentluvMatch2.90.9.6wordpress
ORcommentluvcommentluvMatch2.90.9.7wordpress
ORcommentluvcommentluvMatch2.90.9.8wordpress
ORcommentluvcommentluvMatch2.90.9.9wordpress
ORcommentluvcommentluvMatch2.90.9.9.1wordpress
ORcommentluvcommentluvMatch2.90.9.9.2wordpress
ORcommentluvcommentluvMatch2.90.9.9.3wordpress
ORcommentluvcommentluvMatch2.91wordpress
ORcommentluvcommentluvMatch2.91.1wordpress
ORcommentluvcommentluvMatch2.92wordpress
ORcommentluvcommentluvMatch2.92.1wordpress
ORcommentluvcommentluvMatch2.92.2wordpress
ORcommentluvcommentluvMatch2.761wordpress
ORcommentluvcommentluvMatch2.762wordpress
ORcommentluvcommentluvMatch2.763wordpress
ORcommentluvcommentluvMatch2.764wordpress
ORcommentluvcommentluvMatch2.765wordpress
ORcommentluvcommentluvMatch2.766wordpress
ORcommentluvcommentluvMatch2.767wordpress
ORcommentluvcommentluvMatch2.768wordpress
ORcommentluvcommentluvMatch2.769wordpress
ORcommentluvcommentluvMatch2.7691wordpress
wordpresswordpressMatch-
Related
cvelist
cvelist
CVE-2013-1409
2014-03-03 16:00:00
wpvulndb
wpvulndb
CommentLuv 2.92.3 - Cross Site Scripting
2014-08-01 10:58:57
htbridge
htbridge
Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin
2013-01-16 00:00:00
openvas
openvas
WordPress CommentLuv Plugin '_ajax_nonce' Cross-Site Scripting Vulnerability
2014-03-11 00:00:00
securityvulns
securityvulns
packetstorm
packetstorm
WordPress CommentLuv 2.92.3 Cross Site Scripting
2013-02-06 00:00:00
patchstack
patchstack
WordPress CommentLuv Plugin - Cross Site Scripting
2013-02-06 00:00:00
prion
prion
Cross site scripting
2014-03-03 16:55:00
nvd
nvd
CVE-2013-1409
2014-03-03 16:55:03
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
84.9%
Related for CVE-2013-1409