Lucene search

K
cveMitreCVE-2013-7129
HistoryDec 17, 2013 - 4:08 p.m.

CVE-2013-7129

2013-12-1716:08:51
CWE-79
mitre
web.nvd.nist.gov
20
cve
2013
7129
cross-site scripting
xss
vulnerability
themebeans
blooog theme
wordpress
remote attackers
web script
html
jquery
jplayer.swf
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

57.0%

Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf.

Affected configurations

Nvd
Node
themebeansblooog_themeMatch1.1---wordpress
VendorProductVersionCPE
themebeansblooog_theme1.1cpe:2.3:a:themebeans:blooog_theme:1.1:-:-:*:-:wordpress:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

57.0%