CVE-2013-2201

Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of media files, (2) editing of media files, (3) installation of plugins, (4) updates to plugins, (5) installation of themes, or (6) updates to themes.

References

https://bugzilla.redhat.com/show_bug.cgi?id=976784

http://www.debian.org/security/2013/dsa-2718

http://wordpress.org/news/2013/06/wordpress-3-5-2/

http://codex.wordpress.org/Version_3.5.2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3