Lucene search
HistoryNov 22, 2013 - 8:55 p.m.
CVE-2013-6342
cve-2013-6342
cross-site scripting
xss
tweet blender plugin
wordpress
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.4%
Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-admin/options-general.php.
Affected configurations
Node
tweet-blendertweet-blenderRange≤4.0.1---wordpress
ORtweet-blendertweet-blenderMatch2.0.0---wordpress
ORtweet-blendertweet-blenderMatch2.0.1---wordpress
ORtweet-blendertweet-blenderMatch2.0.2---wordpress
ORtweet-blendertweet-blenderMatch2.0.3---wordpress
ORtweet-blendertweet-blenderMatch2.0.4---wordpress
ORtweet-blendertweet-blenderMatch2.0.5---wordpress
ORtweet-blendertweet-blenderMatch2.1.0---wordpress
ORtweet-blendertweet-blenderMatch2.1.1---wordpress
ORtweet-blendertweet-blenderMatch2.2.0---wordpress
ORtweet-blendertweet-blenderMatch2.2.1---wordpress
ORtweet-blendertweet-blenderMatch2.2.2---wordpress
ORtweet-blendertweet-blenderMatch2.2.3---wordpress
ORtweet-blendertweet-blenderMatch2.3.0---wordpress
ORtweet-blendertweet-blenderMatch2.4.0---wordpress
ORtweet-blendertweet-blenderMatch2.4.1---wordpress
ORtweet-blendertweet-blenderMatch2.4.2---wordpress
ORtweet-blendertweet-blenderMatch2.4.3---wordpress
ORtweet-blendertweet-blenderMatch2.4.4---wordpress
ORtweet-blendertweet-blenderMatch2.4.5---wordpress
ORtweet-blendertweet-blenderMatch2.4.6---wordpress
ORtweet-blendertweet-blenderMatch2.4.7---wordpress
ORtweet-blendertweet-blenderMatch3.0.0---wordpress
ORtweet-blendertweet-blenderMatch3.0.1---wordpress
ORtweet-blendertweet-blenderMatch3.0.2---wordpress
ORtweet-blendertweet-blenderMatch3.0.3---wordpress
ORtweet-blendertweet-blenderMatch3.0.4---wordpress
ORtweet-blendertweet-blenderMatch3.0.5---wordpress
ORtweet-blendertweet-blenderMatch3.0.6---wordpress
ORtweet-blendertweet-blenderMatch3.0.7---wordpress
ORtweet-blendertweet-blenderMatch3.0.8---wordpress
ORtweet-blendertweet-blenderMatch3.1.0---wordpress
ORtweet-blendertweet-blenderMatch3.1.1---wordpress
ORtweet-blendertweet-blenderMatch3.1.2---wordpress
ORtweet-blendertweet-blenderMatch3.1.3---wordpress
ORtweet-blendertweet-blenderMatch3.1.4---wordpress
ORtweet-blendertweet-blenderMatch3.1.5---wordpress
ORtweet-blendertweet-blenderMatch3.1.6---wordpress
ORtweet-blendertweet-blenderMatch3.1.7---wordpress
ORtweet-blendertweet-blenderMatch3.1.8---wordpress
ORtweet-blendertweet-blenderMatch3.1.9---wordpress
ORtweet-blendertweet-blenderMatch3.1.10---wordpress
ORtweet-blendertweet-blenderMatch3.1.11---wordpress
ORtweet-blendertweet-blenderMatch3.1.12---wordpress
ORtweet-blendertweet-blenderMatch3.1.13---wordpress
ORtweet-blendertweet-blenderMatch3.1.14---wordpress
ORtweet-blendertweet-blenderMatch3.1.15---wordpress
ORtweet-blendertweet-blenderMatch3.1.16---wordpress
ORtweet-blendertweet-blenderMatch3.1.17---wordpress
ORtweet-blendertweet-blenderMatch3.1.18---wordpress
ORtweet-blendertweet-blenderMatch3.2.0---wordpress
ORtweet-blendertweet-blenderMatch3.2.1---wordpress
ORtweet-blendertweet-blenderMatch3.2.2---wordpress
ORtweet-blendertweet-blenderMatch3.2.3---wordpress
ORtweet-blendertweet-blenderMatch3.2.4---wordpress
ORtweet-blendertweet-blenderMatch3.3.0---wordpress
ORtweet-blendertweet-blenderMatch3.3.1---wordpress
ORtweet-blendertweet-blenderMatch3.3.2---wordpress
ORtweet-blendertweet-blenderMatch3.3.3---wordpress
ORtweet-blendertweet-blenderMatch3.3.4---wordpress
ORtweet-blendertweet-blenderMatch3.3.5---wordpress
ORtweet-blendertweet-blenderMatch3.3.6---wordpress
ORtweet-blendertweet-blenderMatch3.3.7---wordpress
ORtweet-blendertweet-blenderMatch3.3.8---wordpress
ORtweet-blendertweet-blenderMatch3.3.9---wordpress
ORtweet-blendertweet-blenderMatch3.3.10---wordpress
ORtweet-blendertweet-blenderMatch3.3.11---wordpress
ORtweet-blendertweet-blenderMatch3.3.12---wordpress
ORtweet-blendertweet-blenderMatch3.3.13---wordpress
ORtweet-blendertweet-blenderMatch3.3.14---wordpress
ORtweet-blendertweet-blenderMatch3.3.15---wordpress
ORtweet-blendertweet-blenderMatch4.0.0---wordpress
Related
packetstorm
packetstorm
WordPress Tweet Blender 4.0.1 Cross Site Scripting
2013-11-18 00:00:00
prion
prion
Cross site scripting
2013-11-22 20:55:00
zdt
zdt
WordPress Tweet Blender 4.0.1 Cross Site Scripting Vulnerability
2013-11-19 00:00:00
patchstack
patchstack
WordPress Tweet Blender Plugin <= 4.0.1 - XSS
2013-11-01 00:00:00
securityvulns
securityvulns
Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
2013-12-09 00:00:00
cvelist
cvelist
CVE-2013-6342
2013-11-22 15:00:00
wpvulndb
wpvulndb
Tweet Blender 4.0.1 - Unspecified XSS
2014-08-01 10:59:05
htbridge
htbridge
Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
2013-10-25 00:00:00
nvd
nvd
CVE-2013-6342
2013-11-22 20:55:10
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.4%
Related for CVE-2013-6342