Lucene search
N/APATCHSTACK:E3CA25DB20BA47A6A12C1915ACC2A96EHistorySep 09, 2013 - 12:00 a.m.
WordPress Design Approval System Plugin <= 3.6 - XSS
2013-09-0900:00:00
N/A
patchstack.com
1
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Because of this vulnerability in admin/walkthrough/walkthrough.php, the attackers can inject arbitrary web script or HTML via the “step” parameter.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| design approval system | le | 3.6 |
Related
prion
prion
Cross site scripting
2013-09-17 12:04:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2013-5711
2022-10-03 16:14:56
cve
cve
CVE-2013-5711
2013-09-17 12:04:00
packetstorm
packetstorm
WordPress Design-Approval-System 3.6 Cross Site Scripting
2013-09-13 00:00:00
wpvulndb
wpvulndb
Design Approval System 3.6 - XSS
2014-08-01 10:59:02
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for PATCHSTACK:E3CA25DB20BA47A6A12C1915ACC2A96E