CVE-2013-1466

Published: Feb 5, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.

Affected (44)

Products: Glfusion: Glfusion

Glfusion

1 product

Glfusion

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Glfusion Glfusion	Up to 1.2.2.pl3
Glfusion Glfusion	Version 1.0.0
Glfusion Glfusion	Version 1.0.0 rc1
Glfusion Glfusion	Version 1.0.0 rc2
Glfusion Glfusion	Version 1.0.1
Glfusion Glfusion	Version 1.0.2
Glfusion Glfusion	Version 1.1.0
Glfusion Glfusion	Version 1.1.0 rc1
Glfusion Glfusion	Version 1.1.1
Glfusion Glfusion	Version 1.1.2
Glfusion Glfusion	Version 1.1.3
Glfusion Glfusion	Version 1.1.4.pl1
Glfusion Glfusion	Version 1.1.4.pl2
Glfusion Glfusion	Version 1.1.4.pl3
Glfusion Glfusion	Version 1.1.4.pl4
Glfusion Glfusion	Version 1.1.4
Glfusion Glfusion	Version 1.1.5.pl1
Glfusion Glfusion	Version 1.1.5.pl2
Glfusion Glfusion	Version 1.1.5.pl3
Glfusion Glfusion	Version 1.1.5
Glfusion Glfusion	Version 1.1.6.pl1
Glfusion Glfusion	Version 1.1.6.pl2
Glfusion Glfusion	Version 1.1.6.pl3
Glfusion Glfusion	Version 1.1.6.pl4
Glfusion Glfusion	Version 1.1.6
Glfusion Glfusion	Version 1.1.7
Glfusion Glfusion	Version 1.1.8.pl1
Glfusion Glfusion	Version 1.1.8.pl2
Glfusion Glfusion	Version 1.1.8.pl3
Glfusion Glfusion	Version 1.1.8.pl4
Glfusion Glfusion	Version 1.1.8.pl5
Glfusion Glfusion	Version 1.1.8.pl6
Glfusion Glfusion	Version 1.1.8
Glfusion Glfusion	Version 1.2.0.pl1
Glfusion Glfusion	Version 1.2.0.pl2
Glfusion Glfusion	Version 1.2.0.pl3
Glfusion Glfusion	Version 1.2.0.pl4
Glfusion Glfusion	Version 1.2.0.pl5
Glfusion Glfusion	Version 1.2.0.pl6
Glfusion Glfusion	Version 1.2.0.pl7
Glfusion Glfusion	Version 1.2.0
Glfusion Glfusion	Version 1.2.2.pl1
Glfusion Glfusion	Version 1.2.2.pl2
Glfusion Glfusion	Version 1.2.2