Lucene search
High-Tech Bridge SAPATCHSTACK:01B5D2CF0D05CB6E3333CD920A385CF0HistoryJun 19, 2013 - 12:00 a.m.
WordPress BackWPup Plugin <= 3.0.12 - XSS
2013-06-1900:00:00
High-Tech Bridge SA
patchstack.com
4
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the “tab” parameter to wp-admin/admin.php.
Solution
Update the plugin.
Related
htbridge
htbridge
Cross-Site Scripting (XSS) in BackWPup WordPress Plugin
2013-06-19 00:00:00
packetstorm
packetstorm
WordPress BackWPup 3.0.12 Cross Site Scripting
2013-08-22 00:00:00
zdt
zdt
WordPress BackWPup 3.0.12 Cross Site Scripting Vulnerability
2013-08-23 00:00:00
wpvulndb
wpvulndb
BackWPup <= 3.0.12 - Authenticated Cross-Site Scripting (XSS)
2013-06-19 00:00:00
prion
prion
Cross site scripting
2013-09-26 15:55:00
securityvulns
securityvulns
Cross-Site Scripting (XSS) in BackWPup WordPress Plugin
2013-09-09 00:00:00
cve
cve
CVE-2013-4626
2013-09-26 15:55:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for PATCHSTACK:01B5D2CF0D05CB6E3333CD920A385CF0