CVE-2013-5670: XSS
Published Nov 5, 2013
·Updated
Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the torlist parameter.
Affected Software
38 affected components
S9Y serendipity<=1.7.2
S9Y serendipity=0.3
S9Y serendipity=0.4
S9Y serendipity=0.7
S9Y serendipity=0.7.1
S9Y serendipity=0.8
S9Y serendipity=0.8.1
S9Y serendipity=0.8.2
S9Y serendipity=0.8.3
S9Y serendipity=0.8.4
S9Y serendipity=0.8.5
S9Y serendipity=0.9
S9Y serendipity=0.9.1
S9Y serendipity=1.0
S9Y serendipity=1.0.1
S9Y serendipity=1.0.2
S9Y serendipity=1.0.3
S9Y serendipity=1.0.4
S9Y serendipity=1.1
S9Y serendipity=1.1.1
S9Y serendipity=1.1.2
S9Y serendipity=1.1.3
S9Y serendipity=1.1.4
S9Y serendipity=1.2
S9Y serendipity=1.2.1
S9Y serendipity=1.3
S9Y serendipity=1.3.1
S9Y serendipity=1.4
S9Y serendipity=1.4.1
S9Y serendipity=1.5.1
S9Y serendipity=1.5.2
S9Y serendipity=1.5.3
S9Y serendipity=1.5.4
S9Y serendipity=1.5.5
S9Y serendipity=1.6
S9Y serendipity=1.6.1
S9Y serendipity=1.6.2
S9Y serendipity=1.7
Remediation
Patch Available
Patch Available
Event History
Nov 5, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5670?
CVE-2013-5670 is a moderate severity vulnerability that allows remote attackers to execute arbitrary web scripts or HTML.
2
How do I fix CVE-2013-5670?
To fix CVE-2013-5670, update the Serendipity software to version 1.7.3 or later.
3
Which versions of Serendipity are affected by CVE-2013-5670?
CVE-2013-5670 affects Serendipity versions prior to 1.7.3, including 1.7.2 and earlier.
4
What type of vulnerability is CVE-2013-5670?
CVE-2013-5670 is classified as a Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2013-5670 be exploited without authentication?
Yes, CVE-2013-5670 can be exploited by remote attackers without requiring authentication.