CVE-2013-7319

2014-02-0616:10:59

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-7319

cross-site scripting

xss

download manager plugin

wordpress

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

JSON

Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field.

Affected configurations

NVD

Node

wpdownloadmanagerwordpress_download_managerRange≤2.5.8wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.0wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.1wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.2wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.3wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.4wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.5wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.6wordpress

wpdownloadmanagerwordpress_download_managerMatch2.5.7wordpress

CPENameOperatorVersion
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managerle2.5.8
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.0
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.1
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.2
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.3
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.4
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.5
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.6
wpdownloadmanager:wordpress_download_managerwpdownloadmanager wordpress download managereq2.5.7

CPE	Name	Operator	Version
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	le	2.5.8
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.0
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.1
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.2
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.3
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.4
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.5
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.6
wpdownloadmanager:wordpress_download_manager	wpdownloadmanager wordpress download manager	eq	2.5.7