Lucene search

K
nvd[email protected]NVD:CVE-2013-5711
HistorySep 17, 2013 - 12:04 p.m.

CVE-2013-5711

2013-09-1712:04:16
CWE-79
web.nvd.nist.gov
1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

52.1%

Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter.

Affected configurations

Nvd
Node
slickremixdesign_approval_system_pluginRange3.6
OR
slickremixdesign_approval_system_pluginMatch1.0
OR
slickremixdesign_approval_system_pluginMatch1.1
OR
slickremixdesign_approval_system_pluginMatch1.2
OR
slickremixdesign_approval_system_pluginMatch1.3
OR
slickremixdesign_approval_system_pluginMatch1.4
OR
slickremixdesign_approval_system_pluginMatch1.5
OR
slickremixdesign_approval_system_pluginMatch1.6
OR
slickremixdesign_approval_system_pluginMatch1.7
OR
slickremixdesign_approval_system_pluginMatch1.8
OR
slickremixdesign_approval_system_pluginMatch1.9
OR
slickremixdesign_approval_system_pluginMatch2.0
OR
slickremixdesign_approval_system_pluginMatch2.1
OR
slickremixdesign_approval_system_pluginMatch2.2
OR
slickremixdesign_approval_system_pluginMatch2.3
OR
slickremixdesign_approval_system_pluginMatch2.4
OR
slickremixdesign_approval_system_pluginMatch2.5
OR
slickremixdesign_approval_system_pluginMatch2.6
OR
slickremixdesign_approval_system_pluginMatch2.7
OR
slickremixdesign_approval_system_pluginMatch2.8
OR
slickremixdesign_approval_system_pluginMatch2.9
OR
slickremixdesign_approval_system_pluginMatch3.0
OR
slickremixdesign_approval_system_pluginMatch3.1
OR
slickremixdesign_approval_system_pluginMatch3.2
OR
slickremixdesign_approval_system_pluginMatch3.3
OR
slickremixdesign_approval_system_pluginMatch3.4
OR
slickremixdesign_approval_system_pluginMatch3.5
VendorProductVersionCPE
slickremixdesign_approval_system_plugin*cpe:2.3:a:slickremix:design_approval_system_plugin:*:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.0cpe:2.3:a:slickremix:design_approval_system_plugin:1.0:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.1cpe:2.3:a:slickremix:design_approval_system_plugin:1.1:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.2cpe:2.3:a:slickremix:design_approval_system_plugin:1.2:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.3cpe:2.3:a:slickremix:design_approval_system_plugin:1.3:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.4cpe:2.3:a:slickremix:design_approval_system_plugin:1.4:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.5cpe:2.3:a:slickremix:design_approval_system_plugin:1.5:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.6cpe:2.3:a:slickremix:design_approval_system_plugin:1.6:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.7cpe:2.3:a:slickremix:design_approval_system_plugin:1.7:*:*:*:*:*:*:*
slickremixdesign_approval_system_plugin1.8cpe:2.3:a:slickremix:design_approval_system_plugin:1.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 271

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

52.1%