Description

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Remediation

References

CVE-2013-0237

Related Vulnerabilities

Drupal Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-9450)

Sqlite NULL Pointer Dereference Vulnerability (CVE-2018-8740)

Java Denial of Service (DoS) Vulnerability (CVE-2018-3180)

Oracle JRE CVE-2013-2437 Vulnerability (CVE-2013-2437)

Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935)

Severity

Medium

Classification

CVE-2013-0237 CWE-707

Tags

Missing Update Known Vulnerabilities