Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2013-4954
HistoryJul 29, 2013 - 11:27 p.m.

CVE-2013-4954

2013-07-2923:27:50
CWE-79
mitre
web.nvd.nist.gov
23
cve-2013-4954
cross-site scripting
xss
genetech solutions pie-register
wp-login.php
wordpress
nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when “Allow New Registrations to set their own Password” is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
genetechsolutionspie-registerRange≤1.30
OR
genetechsolutionspie-registerMatch1.0.1
OR
genetechsolutionspie-registerMatch1.1.1
OR
genetechsolutionspie-registerMatch1.1.2
OR
genetechsolutionspie-registerMatch1.1.3
OR
genetechsolutionspie-registerMatch1.1.5
OR
genetechsolutionspie-registerMatch1.1.6
OR
genetechsolutionspie-registerMatch1.1.7
OR
genetechsolutionspie-registerMatch1.1.8
OR
genetechsolutionspie-registerMatch1.1.9
OR
genetechsolutionspie-registerMatch1.1.9a
OR
genetechsolutionspie-registerMatch1.2.0
OR
genetechsolutionspie-registerMatch1.2.1
OR
genetechsolutionspie-registerMatch1.2.2
OR
genetechsolutionspie-registerMatch1.2.3
OR
genetechsolutionspie-registerMatch1.2.4
OR
genetechsolutionspie-registerMatch1.2.6
OR
genetechsolutionspie-registerMatch1.2.7
OR
genetechsolutionspie-registerMatch1.2.8beta
OR
genetechsolutionspie-registerMatch1.2.9
OR
genetechsolutionspie-registerMatch1.2.9a
OR
genetechsolutionspie-registerMatch1.2.91
AND
wordpresswordpressMatch-
VendorProductVersionCPE
genetechsolutionspie-register*cpe:2.3:a:genetechsolutions:pie-register:*:*:*:*:*:*:*:*
genetechsolutionspie-register1.0.1cpe:2.3:a:genetechsolutions:pie-register:1.0.1:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.1cpe:2.3:a:genetechsolutions:pie-register:1.1.1:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.2cpe:2.3:a:genetechsolutions:pie-register:1.1.2:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.3cpe:2.3:a:genetechsolutions:pie-register:1.1.3:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.5cpe:2.3:a:genetechsolutions:pie-register:1.1.5:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.6cpe:2.3:a:genetechsolutions:pie-register:1.1.6:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.7cpe:2.3:a:genetechsolutions:pie-register:1.1.7:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.8cpe:2.3:a:genetechsolutions:pie-register:1.1.8:*:*:*:*:*:*:*
genetechsolutionspie-register1.1.9cpe:2.3:a:genetechsolutions:pie-register:1.1.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 231

Related

patchstack 1
prion 1
nvd 1
wpvulndb 1
cvelist 1
exploitdb 1
patchstack
patchstack
WordPress Pie Register Plugin - Multiple Cross Site Scripting Vulnerabilities
2013-07-12 00:00:00
prion
prion
Cross site scripting
2013-07-29 23:27:00
nvd
nvd
CVE-2013-4954
2013-07-29 23:27:50
wpvulndb
wpvulndb
Pie Register - wp-login.php Multiple Parameter XSS
2014-08-01 10:59:02
cvelist
cvelist
CVE-2013-4954
2013-07-29 23:00:00
exploitdb
exploitdb
WordPress Plugin Pie Register - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities
2013-07-12 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON
Related for CVE-2013-4954
patchstack1prion1nvd1wpvulndb1cvelist1exploitdb1