CVE-2013-3529

MEDIO 4.3CVE-2013-3529 · Published 10/05/2013 · updated 16/06/2026

In breve

CVE-2013-3529 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda wp-funeral-press (smartypantsplugins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.6%, superiore al 91.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
wp-funeral-press smartypantsplugins	`= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.7= 1.0.9= 1.1.0= 1.1.2= 1.1.3= 1.1.4≤ 1.1.6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) photo-message, or (3) youtube-message parameter.

References

packetstormsecurity.com/files/121030/WordPress-FuneralPress-1.1.6-Cross-Site-Scripting.html · Exploit
plugins.trac.wordpress.org/changeset
seclists.org/fulldisclosure/2013/Mar/282 · Exploit
secunia.com/advisories/52809 · Vendor Advisory
wordpress.org/extend/plugins/wp-funeral-press/changelog
exploit-db.com/exploits/24914 · Exploit
securityfocus.com/bid/58790
exchange.xforce.ibmcloud.com/vulnerabilities/83188

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free