CVE-2013-7319: XSS
Published Feb 6, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field.
Affected Software
18 affected components
Wpdownloadmanager Wordpress Download Manager Wordpress<=2.5.8
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.0
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.1
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.2
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.3
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.4
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.5
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.6
Wpdownloadmanager Wordpress Download Manager Wordpress=2.5.7
W3eden Download Manager Wordpress<=2.5.8
W3eden Download Manager Wordpress=2.5.0
W3eden Download Manager Wordpress=2.5.1
W3eden Download Manager Wordpress=2.5.2
W3eden Download Manager Wordpress=2.5.3
W3eden Download Manager Wordpress=2.5.4
W3eden Download Manager Wordpress=2.5.5
W3eden Download Manager Wordpress=2.5.6
W3eden Download Manager Wordpress=2.5.7
Event History
Feb 6, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·04:10 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7319?
CVE-2013-7319 is a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-7319?
To fix CVE-2013-7319, update the WordPress Download Manager plugin to version 2.5.9 or later.
3
Which versions of WordPress Download Manager are affected by CVE-2013-7319?
CVE-2013-7319 affects versions of WordPress Download Manager from 2.5.0 to 2.5.8.
4
What type of attack can be executed due to CVE-2013-7319?
CVE-2013-7319 can allow remote attackers to inject arbitrary web script or HTML via the title field.
5
Who is at risk due to CVE-2013-7319?
Websites using affected versions of the WordPress Download Manager plugin are at risk of cross-site scripting attacks.