CVE-2013-1636

Published: Mar 12, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers to inject arbitrary web script or HTML via the get-data parameter.

Affected (45)

Products: Caseproof: Prettylinks · Joobi: Com Jnews · Civicrm: Civicrm

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Caseproof Prettylinks	Up to 1.6.2
Caseproof Prettylinks	Version 1.6.0
Caseproof Prettylinks	Version 1.6.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Joobi Com Jnews	Version 8.0.1

Configuration C

41 vulnerable

Vulnerable Software	Affected Versions
Civicrm Civicrm	Version 3.1.0
Civicrm Civicrm	Version 3.1.1
Civicrm Civicrm	Version 3.1.2
Civicrm Civicrm	Version 3.1.3
Civicrm Civicrm	Version 3.1.4
Civicrm Civicrm	Version 3.1.5
Civicrm Civicrm	Version 3.1.6
Civicrm Civicrm	Version 3.2.0
Civicrm Civicrm	Version 3.2.1
Civicrm Civicrm	Version 3.2.2
Civicrm Civicrm	Version 3.2.3
Civicrm Civicrm	Version 3.2.4
Civicrm Civicrm	Version 3.2.5
Civicrm Civicrm	Version 3.3.0
Civicrm Civicrm	Version 3.3.1
Civicrm Civicrm	Version 3.3.2
Civicrm Civicrm	Version 3.3.3
Civicrm Civicrm	Version 3.3.5
Civicrm Civicrm	Version 3.3.6
Civicrm Civicrm	Version 3.4.0
Civicrm Civicrm	Version 4.0.5
Civicrm Civicrm	Version 4.1.0
Civicrm Civicrm	Version 4.1.1
Civicrm Civicrm	Version 4.1.2
Civicrm Civicrm	Version 4.1.3
Civicrm Civicrm	Version 4.1.4
Civicrm Civicrm	Version 4.1.5
Civicrm Civicrm	Version 4.1.6
Civicrm Civicrm	Version 4.2.0
Civicrm Civicrm	Version 4.2.1
Civicrm Civicrm	Version 4.2.2
Civicrm Civicrm	Version 4.2.4
Civicrm Civicrm	Version 4.2.5
Civicrm Civicrm	Version 4.2.6
Civicrm Civicrm	Version 4.2.7
Civicrm Civicrm	Version 4.2.8
Civicrm Civicrm	Version 4.2.9
Civicrm Civicrm	Version 4.3.0
Civicrm Civicrm	Version 4.3.1
Civicrm Civicrm	Version 4.3.2
Civicrm Civicrm	Version 4.3.3