CVE-2013-3515

MEDIUM 4.3CVE-2013-3515 · Published 29/07/2013 · updated 16/06/2026

In short

CVE-2013-3515 is a MEDIUM (CVSS 4.3) vulnerability affecting openx (openx).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 91.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openx openx	`= 2.4= 2.4.10= 2.4.11= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.7.29= 2.8= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5≤ 2.8.10`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.

References

More vulnerabilities in openx

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openx

= 2.4= 2.4.10= 2.4.11= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.7.29= 2.8= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5≤ 2.8.10

No fix yet

More vulnerabilities in openx

See all →