Description

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Remediation

References

CVE-2013-0237

Related Vulnerabilities

WordPress Plugin WM Simple Captcha Security Bypass (2.0.3)

Underscore.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-27601)

WordPress Plugin SendPress Newsletters Security Bypass (1.2.10.20)

WordPress Plugin WP Coder-add custom html, css and js code SQL Injection (2.5.3)

Oracle JRE CVE-2013-2414 Vulnerability (CVE-2013-2414)

Severity

Medium

Classification

CVE-2013-0237 CWE-707

Tags

Missing Update Known Vulnerabilities