CVE-2013-0807

Published: Mar 28, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.

Affected (30)

Products: Gpeasy: Gpeasy Cms

Gpeasy

1 product

Gpeasy Cms

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Gpeasy Gpeasy Cms	Up to 3.5.2
Gpeasy Gpeasy Cms	Version 1.5
Gpeasy Gpeasy Cms	Version 1.5 rc2
Gpeasy Gpeasy Cms	Version 1.5 rc3
Gpeasy Gpeasy Cms	Version 1.5 rc4
Gpeasy Gpeasy Cms	Version 1.6.1
Gpeasy Gpeasy Cms	Version 1.6.2
Gpeasy Gpeasy Cms	Version 1.6.3
Gpeasy Gpeasy Cms	Version 1.6
Gpeasy Gpeasy Cms	Version 1.6 rc1
Gpeasy Gpeasy Cms	Version 1.6 rc2
Gpeasy Gpeasy Cms	Version 1.6 rc3
Gpeasy Gpeasy Cms	Version 1.6 rc4
Gpeasy Gpeasy Cms	Version 1.6 rc5
Gpeasy Gpeasy Cms	Version 2.0.1
Gpeasy Gpeasy Cms	Version 2.1
Gpeasy Gpeasy Cms	Version 2.2
Gpeasy Gpeasy Cms	Version 2.3.1
Gpeasy Gpeasy Cms	Version 2.3.2
Gpeasy Gpeasy Cms	Version 2.3.3
Gpeasy Gpeasy Cms	Version 2.3
Gpeasy Gpeasy Cms	Version 2.4
Gpeasy Gpeasy Cms	Version 3.0.1
Gpeasy Gpeasy Cms	Version 3.0.2
Gpeasy Gpeasy Cms	Version 3.0.3
Gpeasy Gpeasy Cms	Version 3.0.4
Gpeasy Gpeasy Cms	Version 3.0.5
Gpeasy Gpeasy Cms	Version 3.0
Gpeasy Gpeasy Cms	Version 3.5.1
Gpeasy Gpeasy Cms	Version 3.5