Lucene search
Japan Vulnerability NotesJVN:25280162HistoryJul 26, 2013 - 12:00 a.m.
JVN#25280162: WordPress vulnerable to cross-site scripting
2013-07-2600:00:00
Japan Vulnerability Notes
jvn.jp
23
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.015 Low
EPSS
Percentile
86.5%
WordPress contains a cross-site scripting vulnerability due to an issue in the SWFUpload library.
Impact
An arbitrary script may be executed on the user’s web browser.
Solution
Apply an update
Update to the latest version according to the information provided by the developer.
Products Affected
- WordPress versions prior to 3.5.2
Related
patchstack
patchstack
WordPress SWFUpload Plugin <= 2.2.0.1 - XSS #2
2012-04-21 00:00:00
cve
cve
CVE-2012-2399
2012-04-21 23:55:00
prion
prion
Cross site scripting
2012-04-21 23:55:00
ubuntucve
ubuntucve
CVE-2012-2399
2012-04-21 00:00:00
packetstorm
packetstorm
WordPress E-Commerce 3.8.9.5 File Upload / XSS / CSRF / Code Execution
2014-01-24 00:00:00
zdt
zdt
Wordpress Plugin (wp-e-commerce v3.8.9.5) Multiple Vulnerabilities
2014-01-23 00:00:00
debiancve
debiancve
CVE-2012-2399
2012-04-21 23:55:00
openvas
openvas
FreeBSD Ports: wordpress
2012-04-30 00:00:00
FreeBSD Ports: wordpress
2012-04-30 00:00:00
Fedora Update for wordpress FEDORA-2012-6542
2012-05-14 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2012-04-20 00:00:00
nessus
nessus
FreeBSD : wordpress -- multiple vulnerabilities (b384cc5b-8d56-11e1-8d7b-003067b2972c)
2012-04-24 00:00:00
Fedora 16 : wordpress-3.3.2-2.fc16 (2012-6542)
2012-05-14 00:00:00
Fedora 17 : wordpress-3.3.2-2.fc17 (2012-6494)
2012-05-29 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: wordpress-3.3.2-2.fc16
2012-05-11 10:27:22
[SECURITY] Fedora 15 Update: wordpress-3.3.2-2.fc15
2012-05-11 10:30:10
[SECURITY] Fedora 17 Update: wordpress-3.3.2-2.fc17
2012-05-26 08:10:24
osv
osv
wordpress - several
2012-05-11 00:00:00
debian
debian
[SECURITY] [DSA 2670-1] wordpress security update
2012-05-11 20:41:14
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.015 Low
EPSS
Percentile
86.5%
Related for JVN:25280162