CVE-2013-3526

Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

13.94% chance of exploitation in the next 30 days, 97th percentile

Nuclei

medium · CWE-79

Published

2013-05-10

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3526.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38439

Security advisories

• http://secunia.com/advisories/52929
• http://www.securityfocus.com/bid/58948

References

• CVE Record
• NVD entry