Cross-Site Scripting Vulnerability in WordPress Super Cache Plugin by WordPress
CVE-2013-2008

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Super Cache Plugin
Vendor
CVE Published:
7 February 2020

What is CVE-2013-2008?

The WordPress Super Cache Plugin version 1.3 is susceptible to a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. When exploited, this vulnerability can lead to unauthorized actions being performed on behalf of users, potentially compromising sensitive information and the integrity of the web application.

Affected Version(s)

Super Cache Plugin 1.3 (fixed in 1.3.1)

References

http://www.openwall.com/lists/oss-security/2013/04/24/10
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/04/24/8
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/83798
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.