CVE-2013-3720: XSS
Published May 31, 2013
·Updated
Cross-site scripting (XSS) vulnerability in widgetremove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wppostid parameter.
Affected Software
81 affected components
Feedweb Feedweb<=1.8.8
Feedweb Feedweb=1.0.4
Feedweb Feedweb=1.0.5
Feedweb Feedweb=1.0.6
Feedweb Feedweb=1.0.7
Feedweb Feedweb=1.0.8
Feedweb Feedweb=1.1.1
Feedweb Feedweb=1.1.4
Feedweb Feedweb=1.1.5
Feedweb Feedweb=1.1.6
Feedweb Feedweb=1.1.7
Feedweb Feedweb=1.1.9
Feedweb Feedweb=1.2
Feedweb Feedweb=1.2.1
Feedweb Feedweb=1.2.2
Feedweb Feedweb=1.2.3
Feedweb Feedweb=1.2.4
Feedweb Feedweb=1.2.5
Feedweb Feedweb=1.2.6
Feedweb Feedweb=1.2.7
Feedweb Feedweb=1.2.8
Feedweb Feedweb=1.2.9
Feedweb Feedweb=1.2.10
Feedweb Feedweb=1.2.11
Feedweb Feedweb=1.2.12
Feedweb Feedweb=1.3
Feedweb Feedweb=1.3.1
Feedweb Feedweb=1.3.2
Feedweb Feedweb=1.3.3
Feedweb Feedweb=1.3.4
Feedweb Feedweb=1.3.5
Feedweb Feedweb=1.3.6
Feedweb Feedweb=1.3.7
Feedweb Feedweb=1.3.8
Feedweb Feedweb=1.3.9
Feedweb Feedweb=1.3.10
Feedweb Feedweb=1.3.11
Feedweb Feedweb=1.3.12
Feedweb Feedweb=1.3.13
Feedweb Feedweb=1.3.14
Feedweb Feedweb=1.3.15
Feedweb Feedweb=1.4
Feedweb Feedweb=1.4.1
Feedweb Feedweb=1.4.2
Feedweb Feedweb=1.4.3
Feedweb Feedweb=1.4.4
Feedweb Feedweb=1.4.5
Feedweb Feedweb=1.4.6
Feedweb Feedweb=1.4.7
Feedweb Feedweb=1.5
Feedweb Feedweb=1.5.1
Feedweb Feedweb=1.5.2
Feedweb Feedweb=1.5.3
Feedweb Feedweb=1.5.4
Feedweb Feedweb=1.5.5
Feedweb Feedweb=1.5.6
Feedweb Feedweb=1.5.7
Feedweb Feedweb=1.5.8
Feedweb Feedweb=1.5.9
Feedweb Feedweb=1.5.10
Feedweb Feedweb=1.5.11
Feedweb Feedweb=1.5.12
Feedweb Feedweb=1.6
Feedweb Feedweb=1.6.1
Feedweb Feedweb=1.6.2
Feedweb Feedweb=1.6.3
Feedweb Feedweb=1.7
Feedweb Feedweb=1.7.1
Feedweb Feedweb=1.7.2
Feedweb Feedweb=1.7.3
Feedweb Feedweb=1.7.4
Feedweb Feedweb=1.7.5
Feedweb Feedweb=1.8
Feedweb Feedweb=1.8.1
Feedweb Feedweb=1.8.2
Feedweb Feedweb=1.8.3
Feedweb Feedweb=1.8.4
Feedweb Feedweb=1.8.5
Feedweb Feedweb=1.8.6
Feedweb Feedweb=1.8.7
WordPress WordPress
Remediation
Event History
May 31, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3720?
CVE-2013-3720 is classified as a medium severity Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2013-3720?
To fix CVE-2013-3720, update the Feedweb plugin to version 1.9 or later.
3
Who is affected by CVE-2013-3720?
CVE-2013-3720 affects remote authenticated administrators using the Feedweb plugin versions prior to 1.9 in WordPress.
4
What type of vulnerability is CVE-2013-3720?
CVE-2013-3720 is a Cross-site Scripting (XSS) vulnerability that allows script injection via the wp_post_id parameter.
5
What are the affected versions of the Feedweb plugin in CVE-2013-3720?
CVE-2013-3720 affects all versions of the Feedweb plugin prior to version 1.9.