CVE-2013-3720

Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to…

published May 31, 2013

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01551 · 74.9th percentile
Published
2013-05-31T10:00Z
EPSS history
Timeline
  • 31 MAY 10:00Z
    Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to…
    cvelistv5