CVE

Id
62448  
CVE No.
CVE-2013-2501  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field.  
Phase
Assigned (20130307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
625306 62448 CVE-2013-2501 BUGTRAQ:20130308 Stored XSS in Terillion Reviews Wordpress Plugin  View
625307 62448 CVE-2013-2501 URL:http://archives.neohapsis.com/archives/bugtraq/2013-03/0055.html  View
625308 62448 CVE-2013-2501 MISC:http://packetstormsecurity.com/files/120730/WordPress-Terillion-Reviews-Cross-Site-Scripting.html  View
625309 62448 CVE-2013-2501 CONFIRM:http://plugins.trac.wordpress.org/changeset/683838/terillion-reviews  View
625310 62448 CVE-2013-2501 CONFIRM:http://wordpress.org/extend/plugins/terillion-reviews/changelog/  View
625311 62448 CVE-2013-2501 BID:58415  View
625312 62448 CVE-2013-2501 URL:http://www.securityfocus.com/bid/58415  View
625313 62448 CVE-2013-2501 OSVDB:91123  View
625314 62448 CVE-2013-2501 URL:http://osvdb.org/91123  View
625315 62448 CVE-2013-2501 XF:wp-terillionreviews-profileid-xss(82727)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20283 JVNDB-2013-001858 Spree における任意のロールを割り当てられる脆弱性 Spree の spree_auth_devise 内の app/models/spree/user.rb は、ユーザをアップデートする際、マスアサインメントを安全に実行しないため、リモート認証されたユーザに任意のロールを割り当てられる脆弱性が存在します。 CVE-2013-2506 62448 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001858.html  View