CVE-2013-4626
Published Sep 26, 2013
Last updated 11 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "323249C8-CCE7-44CD-B23C-75CB475297CA",
"versionEndIncluding": "3.0.12"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62A5C75-46DD-4CB3-B90B-733DA7A36D34"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0:-:*:*:pro:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFD6657E-5EA6-4A64-A85D-100405CBB993"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAB4CF41-EC94-45E7-8D06-3A68DFBF004D"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C73A6D6-908F-42D4-8068-147149A2B3E3"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26BBA338-4890-445D-9D84-D3D0518AA68E"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B1C810F-4631-4132-B0B9-F84E02F01DE3"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CC3FEDC-8AB4-4AC1-87B4-B1AB4917FB0D"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D412689C-ABF4-4969-A0CA-C5B5D6AD818C"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2858151-408A-4A96-9475-42A20F3CD5CE"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D81403A-CEAC-4323-A6A8-220B145D1714"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E69D25A-9680-4F62-AFA2-5F94E71DA7BF"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB333775-2FFC-4660-BD45-3D4A14537605"
},
{
"criteria": "cpe:2.3:a:marketpress:backwpup_plugin:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7617F40-9636-4F11-B2F5-BC7050121128"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]