Lucene search

K
cvelistFlexeraCVELIST:CVE-2013-2697
HistoryApr 19, 2013 - 10:00 a.m.

CVE-2013-2697

2013-04-1910:00:00
flexera
www.cve.org
6
cve-2013-2697
cross-site request forgery
wp-downloadmanager
wordpress
remote attackers
authentication hijacking
xss sequences
vulnerability

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

39.7%

Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

39.7%

Related for CVELIST:CVE-2013-2697