CVE-2013-6837

MITTEL 4.3CVE-2013-6837 · Published 19/12/2013 · updated 17/06/2026

Kurz gesagt

CVE-2013-6837 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in prettyphoto (no-margin-for-errors).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.1%, höher als bei 87.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
prettyphoto no-margin-for-errors	`≤ 3.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to the default URI.

References

cxsecurity.com/issue/WLB-2013110149 · Exploit
themeforest.net/forums/thread/security-vulnerability-affecting-prettyphoto-jquery-script/181180
themeforest.net/item/udesign-responsive-wordpress-theme/253220
no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone
perucrack.net/2014/07/haciendo-un-xss-en-plugin-prettyphoto.html · URL Repurposed
rafayhackingarticles.net/2013/05/kali-linux-dom-based-xss-writeup.html · Exploit
Duncaen/prettyphoto commit 3ef0ddf · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free