CVE-2013-0731: XSS

Q: What is the severity of CVE-2013-0731?

CVE-2013-0731 has a medium severity rating due to its potential for unauthorized access and XSS vulnerabilities.

Q: How do I fix CVE-2013-0731?

To fix CVE-2013-0731, update the MailUp plugin to version 1.3.3 or later.

Q: What does CVE-2013-0731 affect?

CVE-2013-0731 affects versions of the MailUp plugin for WordPress prior to 1.3.3.

Q: What type of attacks can CVE-2013-0731 facilitate?

CVE-2013-0731 can facilitate remote attacks that modify plugin settings and enable cross-site scripting attacks.

Q: Who is impacted by CVE-2013-0731?

Users of the affected versions of the MailUp plugin for WordPress are impacted by CVE-2013-0731.

Published Mar 22, 2013

Updated

ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks by setting the wordpressloggedin cookie. NOTE: this is due to an incomplete fix for a similar issue that was fixed in 1.3.2.

Affected Software

11 affected components

MailUp Wp-mailup<=1.3.2

MailUp Wp-mailup=1.0.0

MailUp Wp-mailup=1.1.0

MailUp Wp-mailup=1.1.1

MailUp Wp-mailup=1.1.2

MailUp Wp-mailup=1.1.3

MailUp Wp-mailup=1.2

MailUp Wp-mailup=1.3

MailUp Wp-mailup=1.3.1

MailUp Wp-mailup=1.21

WordPress WordPress

Remediation

Patch Available

http://plugins.trac.wordpress.org/changeset?new=682420

Event History

Mar 22, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0731?

CVE-2013-0731 has a medium severity rating due to its potential for unauthorized access and XSS vulnerabilities.

How do I fix CVE-2013-0731?