Vulnerability Details CVE-2013-1409
Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 87.8%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0031.html
- http://osvdb.org/89925
- http://packetstormsecurity.com/files/120090/WordPress-CommentLuv-2.92.3-Cross-Site-Scripting.html
- http://wordpress.org/plugins/commentluv/changelog
- https://www.htbridge.com/advisory/HTB23138
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0031.html
- http://osvdb.org/89925
- http://packetstormsecurity.com/files/120090/WordPress-CommentLuv-2.92.3-Cross-Site-Scripting.html
- http://wordpress.org/plugins/commentluv/changelog
- https://www.htbridge.com/advisory/HTB23138
Products affected by CVE-2013-1409
-
cpe:2.3:a:commentluv:commentluv:2.7
-
cpe:2.3:a:commentluv:commentluv:2.71
-
cpe:2.3:a:commentluv:commentluv:2.74
-
cpe:2.3:a:commentluv:commentluv:2.76
-
cpe:2.3:a:commentluv:commentluv:2.761
-
cpe:2.3:a:commentluv:commentluv:2.762
-
cpe:2.3:a:commentluv:commentluv:2.763
-
cpe:2.3:a:commentluv:commentluv:2.764
-
cpe:2.3:a:commentluv:commentluv:2.765
-
cpe:2.3:a:commentluv:commentluv:2.766
-
cpe:2.3:a:commentluv:commentluv:2.767
-
cpe:2.3:a:commentluv:commentluv:2.768
-
cpe:2.3:a:commentluv:commentluv:2.769
-
cpe:2.3:a:commentluv:commentluv:2.7691
-
cpe:2.3:a:commentluv:commentluv:2.80
-
cpe:2.3:a:commentluv:commentluv:2.81
-
cpe:2.3:a:commentluv:commentluv:2.81.1
-
cpe:2.3:a:commentluv:commentluv:2.81.2
-
cpe:2.3:a:commentluv:commentluv:2.81.3
-
cpe:2.3:a:commentluv:commentluv:2.81.4
-
cpe:2.3:a:commentluv:commentluv:2.81.5
-
cpe:2.3:a:commentluv:commentluv:2.81.6
-
cpe:2.3:a:commentluv:commentluv:2.81.7
-
cpe:2.3:a:commentluv:commentluv:2.81.8
-
cpe:2.3:a:commentluv:commentluv:2.90.1
-
cpe:2.3:a:commentluv:commentluv:2.90.3
-
cpe:2.3:a:commentluv:commentluv:2.90.5
-
cpe:2.3:a:commentluv:commentluv:2.90.6
-
cpe:2.3:a:commentluv:commentluv:2.90.7
-
cpe:2.3:a:commentluv:commentluv:2.90.8
-
cpe:2.3:a:commentluv:commentluv:2.90.8.1
-
cpe:2.3:a:commentluv:commentluv:2.90.8.2
-
cpe:2.3:a:commentluv:commentluv:2.90.8.3
-
cpe:2.3:a:commentluv:commentluv:2.90.9
-
cpe:2.3:a:commentluv:commentluv:2.90.9.1
-
cpe:2.3:a:commentluv:commentluv:2.90.9.2
-
cpe:2.3:a:commentluv:commentluv:2.90.9.3
-
cpe:2.3:a:commentluv:commentluv:2.90.9.4
-
cpe:2.3:a:commentluv:commentluv:2.90.9.5
-
cpe:2.3:a:commentluv:commentluv:2.90.9.6
-
cpe:2.3:a:commentluv:commentluv:2.90.9.7
-
cpe:2.3:a:commentluv:commentluv:2.90.9.8
-
cpe:2.3:a:commentluv:commentluv:2.90.9.9
-
cpe:2.3:a:commentluv:commentluv:2.90.9.9.1
-
cpe:2.3:a:commentluv:commentluv:2.90.9.9.2
-
cpe:2.3:a:commentluv:commentluv:2.90.9.9.3
-
cpe:2.3:a:commentluv:commentluv:2.91
-
cpe:2.3:a:commentluv:commentluv:2.91.1
-
cpe:2.3:a:commentluv:commentluv:2.92
-
cpe:2.3:a:commentluv:commentluv:2.92.1
-
cpe:2.3:a:commentluv:commentluv:2.92.2
-
cpe:2.3:a:commentluv:commentluv:2.92.3
-
cpe:2.3:a:wordpress:wordpress:-