Lucene search
Aditya BalapurePATCHSTACK:58BFB3E5534419EF2CB65CE25579FD4FHistoryMar 07, 2013 - 12:00 a.m.
WordPress Terillion Reviews Plugin <= 1.1 - XSS
2013-03-0700:00:00
Aditya Balapure
patchstack.com
11
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the ProfileId field.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| terillion reviews | le | 1.1 |
Related
packetstorm
packetstorm
WordPress Terillion Reviews Cross Site Scripting
2013-03-09 00:00:00
securityvulns
securityvulns
Stored XSS in Terillion Reviews Wordpress Plugin
2013-03-11 00:00:00
cve
cve
CVE-2013-2501
2013-03-22 21:55:00
prion
prion
Cross site scripting
2013-03-22 21:55:00
wpvulndb
wpvulndb
Terillion Reviews < 1.2 - Profile Id Field XSS
2014-08-01 10:58:58
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for PATCHSTACK:58BFB3E5534419EF2CB65CE25579FD4F