CVE-2013-7279

2014-01-0815:30:02

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.983 for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.

Affected configurations

Nvd

Node

anthony_millss3_videoRange≤0.982

anthony_millss3_videoMatch0.98

anthony_millss3_videoMatch0.981

AND

wordpresswordpressMatch-

VendorProductVersionCPE
anthony_millss3_video*cpe:2.3:a:anthony_mills:s3_video:*:*:*:*:*:*:*:*
anthony_millss3_video0.98cpe:2.3:a:anthony_mills:s3_video:0.98:*:*:*:*:*:*:*
anthony_millss3_video0.981cpe:2.3:a:anthony_mills:s3_video:0.981:*:*:*:*:*:*:*
wordpresswordpress-cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
anthony_mills	s3_video	*	cpe:2.3:a:anthony_mills:s3_video::::::::
anthony_mills	s3_video	0.98	cpe:2.3:a:anthony_mills:s3_video:0.98:::::::*
anthony_mills	s3_video	0.981	cpe:2.3:a:anthony_mills:s3_video:0.981:::::::*
wordpress	wordpress	-	cpe:2.3:a:wordpress:wordpress:-:::::::*