Lucene search
HistoryJul 08, 2013 - 8:55 p.m.
CVE-2013-0237
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.5%
Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected configurations
Node
moxiecodepluploadRange≤1.5.4
ORmoxiecodepluploadMatch1.4.0
ORmoxiecodepluploadMatch1.4.1
ORmoxiecodepluploadMatch1.4.2
ORmoxiecodepluploadMatch1.4.3
ORmoxiecodepluploadMatch1.5.0
ORmoxiecodepluploadMatch1.5.0beta
ORmoxiecodepluploadMatch1.5.1
ORmoxiecodepluploadMatch1.5.2
ORmoxiecodepluploadMatch1.5.3
ORwordpresswordpressRange≤3.5.0
ORwordpresswordpressMatch0.71
ORwordpresswordpressMatch1.0
ORwordpresswordpressMatch1.0.1
ORwordpresswordpressMatch1.0.2
ORwordpresswordpressMatch1.1.1
ORwordpresswordpressMatch1.2
ORwordpresswordpressMatch1.2.1
ORwordpresswordpressMatch1.2.2
ORwordpresswordpressMatch1.2.3
ORwordpresswordpressMatch1.2.4
ORwordpresswordpressMatch1.2.5
ORwordpresswordpressMatch1.2.5a
ORwordpresswordpressMatch1.3
ORwordpresswordpressMatch1.3.2
ORwordpresswordpressMatch1.3.3
ORwordpresswordpressMatch1.5
ORwordpresswordpressMatch1.5.1
ORwordpresswordpressMatch1.5.1.1
ORwordpresswordpressMatch1.5.1.2
ORwordpresswordpressMatch1.5.1.3
ORwordpresswordpressMatch1.5.2
ORwordpresswordpressMatch1.6.2
ORwordpresswordpressMatch2.0
ORwordpresswordpressMatch2.0.1
ORwordpresswordpressMatch2.0.2
ORwordpresswordpressMatch2.0.4
ORwordpresswordpressMatch2.0.5
ORwordpresswordpressMatch2.0.6
ORwordpresswordpressMatch2.0.7
ORwordpresswordpressMatch2.0.8
ORwordpresswordpressMatch2.0.9
ORwordpresswordpressMatch2.0.10
ORwordpresswordpressMatch2.0.11
ORwordpresswordpressMatch2.1
ORwordpresswordpressMatch2.1.1
ORwordpresswordpressMatch2.1.2
ORwordpresswordpressMatch2.1.3
ORwordpresswordpressMatch2.2
ORwordpresswordpressMatch2.2.1
ORwordpresswordpressMatch2.2.2
ORwordpresswordpressMatch2.2.3
ORwordpresswordpressMatch2.3
ORwordpresswordpressMatch2.3.1
ORwordpresswordpressMatch2.3.2
ORwordpresswordpressMatch2.3.3
ORwordpresswordpressMatch2.5
ORwordpresswordpressMatch2.5.1
ORwordpresswordpressMatch2.6
ORwordpresswordpressMatch2.6.1
ORwordpresswordpressMatch2.6.2
ORwordpresswordpressMatch2.6.3
ORwordpresswordpressMatch2.6.5
ORwordpresswordpressMatch2.7
ORwordpresswordpressMatch2.7.1
ORwordpresswordpressMatch2.8
ORwordpresswordpressMatch2.8.1
ORwordpresswordpressMatch2.8.2
ORwordpresswordpressMatch2.8.3
ORwordpresswordpressMatch2.8.4
ORwordpresswordpressMatch2.8.4a
ORwordpresswordpressMatch2.8.5
ORwordpresswordpressMatch2.8.5.1
ORwordpresswordpressMatch2.8.5.2
ORwordpresswordpressMatch2.8.6
ORwordpresswordpressMatch2.9
ORwordpresswordpressMatch2.9.1
ORwordpresswordpressMatch2.9.1.1
ORwordpresswordpressMatch2.9.2
ORwordpresswordpressMatch3.3
ORwordpresswordpressMatch3.3.1
ORwordpresswordpressMatch3.3.2
ORwordpresswordpressMatch3.3.3
ORwordpresswordpressMatch3.4.0
ORwordpresswordpressMatch3.4.1
ORwordpresswordpressMatch3.4.2
Node
fedoraprojectfedoraMatch16
ORfedoraprojectfedoraMatch17
ORfedoraprojectfedoraMatch18
Related
cve
cve
debiancve
debiancve
CVE-2013-0237
2022-10-03 16:15:03
cvelist
cvelist
CVE-2013-0237
2022-10-03 16:15:03
ubuntucve
ubuntucve
CVE-2013-0237
2013-07-08 00:00:00
patchstack
patchstack
WordPress <= 1.5.4 - Cross Site Scripting
2012-12-06 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-16 06:48:00
prion
prion
Cross site scripting
2013-07-08 20:55:00
Design/Logic Flaw
2013-12-01 17:55:00
nvd
nvd
CVE-2013-3550
2013-12-01 17:55:05
CVE-2015-7572
2017-04-24 18:59:00
openvas
openvas
Fedora Update for wordpress FEDORA-2013-1774
2013-02-11 00:00:00
Fedora Update for wordpress FEDORA-2013-1774
2013-02-11 00:00:00
Fedora Update for wordpress FEDORA-2013-1692
2013-02-11 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2013-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: wordpress-3.5.1-1.fc18
2013-02-10 04:25:57
[SECURITY] Fedora 17 Update: wordpress-3.5.1-1.fc17
2013-02-10 04:44:54
[SECURITY] Fedora 18 Update: wordpress-3.5.2-1.fc18
2013-07-03 01:37:44
nessus
nessus
WordPress < 3.5.1 Multiple Vulnerabilities
2016-02-26 00:00:00
FreeBSD : wordpress -- multiple vulnerabilities (559e00b7-6a4d-11e2-b6b0-10bf48230856)
2013-01-30 00:00:00
WordPress < 3.5.1 Multiple Vulnerabilities
2013-02-04 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.5%
Related for NVD:CVE-2013-0237