Vulnerabilities

TI-2013-00171 CVE-2013-0237 · GHSA-v2m5-2mm5-8v3w

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before…

LOW 26

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03135 Published 2013-07-08 No fix listed CWE-79

TI-2012-02128 CVE-2012-2401 · GHSA-ch8h-4j2v-gwvg

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and…

LOW 29

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03502 Published 2012-04-21 No fix listed CWE-264

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before…

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and…