CVE-2013-7472

The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter.
References
Link Resource
https://lists.openwall.net/full-disclosure/2013/03/05/2 Exploit Third Party Advisory
https://wordpress.org/plugins/count-per-day/#developers Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:count_per_day_project:count_per_day:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2019-06-15 23:29

Updated : 2024-02-04 20:20


NVD link : CVE-2013-7472

Mitre link : CVE-2013-7472

CVE.ORG link : CVE-2013-7472


JSON object : View

Products Affected

count_per_day_project

  • count_per_day
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')