CVE-2013-1463
Medium
Description
Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likely that CVE-2013-1463 will be REJECTed.
SeverityMedium
CVSS4.3
Exploit probability—
ProductWp-table Reloaded
PublishedFeb 7, 2013
First seenFeb 7, 2013
How to fix
Update
- wp-table_reloaded_project wp-table_reloaded1.9.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wp-table_reloaded_project wp-table_reloaded | v < 1.9.4 | 1.9.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.