CVE-2013-5098: XSS
Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5098?
CVE-2013-5098 is rated as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2013-5098?
To fix CVE-2013-5098, upgrade the Download Monitor plugin to version 3.3.6.2 or later.
Which versions of Download Monitor are affected by CVE-2013-5098?
CVE-2013-5098 affects all versions of the Download Monitor plugin prior to version 3.3.6.2.
What type of attack does CVE-2013-5098 enable?
CVE-2013-5098 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts via the sort parameter.
Where is the vulnerability CVE-2013-5098 located?
CVE-2013-5098 is found in the admin/admin.php file of the Download Monitor plugin.