WordPress Plugin Vulnerabilities

Design Approval System 3.6 - XSS

Description

The design-approval-system WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
design-approval-system
Fixed in 3.7

References

CVE
CVE-2013-5711
URL
https://packetstormsecurity.com/files/#123227/
URL
https://seclists.org/bugtraq/2013/Sep/54

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
9596ed3e-8fa4-4e11-adee-9725057d8356

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2024-03-29
Title
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting
Published
2014-08-01
Title
Catablog < 1.6.3 - Cross Site Scripting
Published
2024-01-15
Title
CformsII < 15.0.7 - Unauthenticated Stored XSS
Published
2024-03-29
Title
underConstruction < 1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2023-10-16
Title
The Awesome Feed – Custom Feed <= 2.2.5 - Reflected XSS