← Back

CVE-2013-3720

nvd nist
Published: May 31, 2013Modified: Apr 29, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.

Affected (80)

Products: Feedweb: Feedweb
1 product
Feedweb
Configuration A
80 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Feedweb
Up to 1.8.8
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.1.1
Version 1.1.4
Version 1.1.5
Version 1.1.6
Version 1.1.7
Version 1.1.9
Version 1.2.10
Version 1.2.11
Version 1.2.12
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2.6
Version 1.2.7
Version 1.2.8
Version 1.2.9
Version 1.2
Version 1.3.10
Version 1.3.11
Version 1.3.12
Version 1.3.13
Version 1.3.14
Version 1.3.15
Version 1.3.1
Version 1.3.2
Version 1.3.3
Version 1.3.4
Version 1.3.5
Version 1.3.6
Version 1.3.7
Version 1.3.8
Version 1.3.9
Version 1.3
Version 1.4.1
Version 1.4.2
Version 1.4.3
Version 1.4.4
Version 1.4.5
Version 1.4.6
Version 1.4.7
Version 1.4
Version 1.5.10
Version 1.5.11
Version 1.5.12
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5.4
Version 1.5.5
Version 1.5.6
Version 1.5.7
Version 1.5.8
Version 1.5.9
Version 1.5
Version 1.6.1
Version 1.6.2
Version 1.6.3
Version 1.6
Version 1.7.1
Version 1.7.2
Version 1.7.3
Version 1.7.4
Version 1.7.5
Version 1.7
Version 1.8.1
Version 1.8.2
Version 1.8.3
Version 1.8.4
Version 1.8.5
Version 1.8.6
Version 1.8.7
Version 1.8
Running on/withPlatform Versions
Wordpress
Wordpress
All versions

References (8)

Timeline

No history available yet.