CVE-2013-4954: XSS
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4954?
CVE-2013-4954 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-4954?
To fix CVE-2013-4954, upgrade the Genetech Solutions Pie-Register plugin to version 1.31 or later.
What are the implications of CVE-2013-4954?
The implications of CVE-2013-4954 include the risk of attackers injecting arbitrary web scripts or HTML, leading to possible data theft or session hijacking.
Who is affected by CVE-2013-4954?
Users of the Genetech Solutions Pie-Register plugin versions 1.30 and below are affected by CVE-2013-4954 if the "Allow New Registrations to set their own Password" feature is enabled.
Is my WordPress site vulnerable to CVE-2013-4954?
If you are using an affected version of the Genetech Solutions Pie-Register plugin, your WordPress site is vulnerable to CVE-2013-4954.