Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-2640
HistoryMar 22, 2013 - 5:55 p.m.

Cross site scripting

2013-03-2217:55:00
PRIOn knowledge base
www.prio-n.com
7

6.1 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to “formData=save” requests, a different version than CVE-2013-0731.

6.1 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%