CVE-2013-4117
medium · 4.3A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
4.3
CVSS
13.0%
EPSS (exploit prob.)
96th
EPSS percentile
2013-07-16
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| anshul_sharma | category-grid-view-gallery | 2.3.1 |
| wordpress | wordpress | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://exploit.iedb.ir/exploits-177.html
- http://openwall.com/lists/oss-security/2013/07/11/11
- http://osvdb.org/94805
- http://packetstormsecurity.com/files/122259/WordPress-Category-Grid-View-Gallery-XSS.html
- http://seclists.org/bugtraq/2013/Jul/17
- http://www.securityfocus.com/bid/60905
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85395
- http://exploit.iedb.ir/exploits-177.html
- http://openwall.com/lists/oss-security/2013/07/11/11
- http://osvdb.org/94805
- http://packetstormsecurity.com/files/122259/WordPress-Category-Grid-View-Gallery-XSS.html
- http://seclists.org/bugtraq/2013/Jul/17
- http://www.securityfocus.com/bid/60905
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85395
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-4117