CVE-2013-0237

CVE-2013-0237

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

EPSS 3.1% · Fix available

Published

2013-07-08T20:00:00.000Z

Updated

2024-09-16T22:21:09.232Z

Stack: system

Check your server →