CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-13832

Multiple Persistent cross-site scripting (XSS) issues in the Techotronic all-in-one-favicon (aka All In One Favicon) plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.1%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 3.5

References

Products affected by CVE-2018-13832

Techotronic » All In One Favicon » Version: 1.0

cpe:2.3:a:techotronic:all_in_one_favicon:1.0
Techotronic » All In One Favicon » Version: 2.0

cpe:2.3:a:techotronic:all_in_one_favicon:2.0
Techotronic » All In One Favicon » Version: 2.1

cpe:2.3:a:techotronic:all_in_one_favicon:2.1
Techotronic » All In One Favicon » Version: 3.0

cpe:2.3:a:techotronic:all_in_one_favicon:3.0
Techotronic » All In One Favicon » Version: 3.1

cpe:2.3:a:techotronic:all_in_one_favicon:3.1
Techotronic » All In One Favicon » Version: 4.0

cpe:2.3:a:techotronic:all_in_one_favicon:4.0
Techotronic » All In One Favicon » Version: 4.1

cpe:2.3:a:techotronic:all_in_one_favicon:4.1
Techotronic » All In One Favicon » Version: 4.2

cpe:2.3:a:techotronic:all_in_one_favicon:4.2
Techotronic » All In One Favicon » Version: 4.2.1

cpe:2.3:a:techotronic:all_in_one_favicon:4.2.1
Techotronic » All In One Favicon » Version: 4.3

cpe:2.3:a:techotronic:all_in_one_favicon:4.3
Techotronic » All In One Favicon » Version: 4.4

cpe:2.3:a:techotronic:all_in_one_favicon:4.4
Techotronic » All In One Favicon » Version: 4.5

cpe:2.3:a:techotronic:all_in_one_favicon:4.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-13832

Products

Pricing

Contact Us