NVD

Id
40438  
Name
CVE-2013-4954  
Description
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-07-29  
Modified Date
2013-07-30  
Seq
2013-4954  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205307 40438 CVE-2013-4954 http://plugins.trac.wordpress.org/changeset?reponame=&old=740249%40pie-register&new=740249%40pie-register  View
205308 40438 CVE-2013-4954 http://wordpress.org/plugins/pie-register/changelog/  View
205309 40438 CVE-2013-4954 http://wordpress.org/support/topic/security-issue-web-application-cross-site-scripting  View
205310 40438 CVE-2013-4954 61140  View
205311 40438 CVE-2013-4954 pieregister-wplogin-xss(85604)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21983 JVNDB-2013-003558 WordPress 用 Genetech Solutions Pie-Register プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Genetech Solutions Pie-Register プラグインには、"Allow New Registrations to set their own Password" (自分のパスワードを設定するための新規登録を許可する) 設定が有効な場合、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4954 64896 CVE-2013-4954 40438 2.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003558.html 2013-07-13 2013-07-31 View