CVE-2013-0236

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.48% chance of exploitation in the next 30 days, 83th percentile

Nuclei

medium

Published

2013-07-08

Updated

2024-09-16

Proof-of-concept exploits (1)

• bogdanovist2061/Project-7---WordPress-Pentesting0★ · 2018-04-14

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2013/CVE-2013-0236-wordpress-ab…

References

• CVE Record
• NVD entry

Related

• CVE-2017-17092
• CVE-2018-6389
• CVE-2013-0235
• CVE-2013-0237
• CVE-2013-0233
• CVE-2013-0238