CVE-2013-6991

2014-01-0318:54:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-6991

cross-site scripting

xss

wp-cron dashboard plugin

wordpress

nvd

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

Cross-site scripting (XSS) vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php.

CPENameOperatorVersion
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardle1.1.5
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardeq1.1.0
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardeq1.1.1
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardeq1.1.2
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardeq1.1.3
wokamoto:wp-cron_dashboardwokamoto wp-cron dashboardeq1.1.4

CPE	Name	Operator	Version
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	le	1.1.5
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	eq	1.1.0
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	eq	1.1.1
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	eq	1.1.2
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	eq	1.1.3
wokamoto:wp-cron_dashboard	wokamoto wp-cron dashboard	eq	1.1.4