Description

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Remediation

References

CVE-2013-0237

Related Vulnerabilities

WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Scripting (5.3.2.0)

WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)

GlassFish CVE-2011-3559 Vulnerability (CVE-2011-3559)

WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.1)

Drupal Data Processing Errors Vulnerability (CVE-2017-6920)

Severity

Medium

Classification

CVE-2013-0237 CWE-707

Tags

Missing Update Known Vulnerabilities