Description

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Remediation

References

CVE-2013-0237

Related Vulnerabilities

WordPress Plugin Hostel Cross-Site Scripting (1.1.3)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-26594)

WordPress Plugin WordPress Payments-GetPaid Cross-Site Scripting (2.3.3)

WordPress Plugin Homepage SlideShow Arbitrary File Upload (2.3)

WordPress Plugin Category Grid View Gallery Cross-Site Scripting (2.3.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-0237