VulnerabilityModified

CVE-2013-1463

MEDIUM 4.3EPSS 6.35%

Does this matter?

Lower severity and a low EPSS score (6.35%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likely that CVE-2013-1463 will be REJECTed.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 6.35% probability · 93th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: wp-table reloaded project/wp-table reloaded
Source: cve@mitre.org

References

http://osvdb.org/89754Broken Link
http://packetstormsecurity.com/files/119968/WordPress-WP-Table-Reloaded-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/52027Broken Link, Vendor Advisory
http://tobias.baethge.com/2013/01/maintenance-release-wp-table-reloaded-1-9-4/Patch, Vendor Advisory
http://www.securityfocus.com/bid/57664Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/81748Third Party Advisory, VDB Entry
http://osvdb.org/89754Broken Link
http://packetstormsecurity.com/files/119968/WordPress-WP-Table-Reloaded-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/52027Broken Link, Vendor Advisory
http://tobias.baethge.com/2013/01/maintenance-release-wp-table-reloaded-1-9-4/Patch, Vendor Advisory
http://www.securityfocus.com/bid/57664Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/81748Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.