NVD

Id
39315  
Name
CVE-2013-3529  
Description
Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) photo-message, or (3) youtube-message parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-05-10  
Modified Date
2013-05-13  
Seq
2013-3529  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200654 39315 CVE-2013-3529 http://packetstormsecurity.com/files/121030/WordPress-FuneralPress-1.1.6-Cross-Site-Scripting.html  View
200655 39315 CVE-2013-3529 http://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-funeral-press&old=690038&new_path=%2Fwp-funeral-press&new=690038  View
200656 39315 CVE-2013-3529 20130331 WP FuneralPress - Stored XSS in Guestbook  View
200657 39315 CVE-2013-3529 http://wordpress.org/extend/plugins/wp-funeral-press/changelog/  View
200658 39315 CVE-2013-3529 24914  View
200659 39315 CVE-2013-3529 58790  View
200660 39315 CVE-2013-3529 wpfuneralpress-index-xss(83188)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21062 JVNDB-2013-002637 WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性 WordPress 用 WP FuneralPress プラグインの user/obits.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-3529 63471 CVE-2013-3529 39315 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002637.html 2013-05-10 2013-05-14 View