Lucene search

K
cvelistFlexeraCVELIST:CVE-2013-2704
HistoryJul 12, 2013 - 9:00 p.m.

CVE-2013-2704

2013-07-1221:00:00
flexera
www.cve.org
2
cve-2013-2704
cross-site request forgery
wordpress
dropdown menu widget
remote attackers
authentication hijacking
cross-site scripting

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

39.7%

Cross-site request forgery (CSRF) vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

39.7%

Related for CVELIST:CVE-2013-2704