cbcvebase.
CVE-2013-3515
published 2013-07-29

CVE-2013-3515: Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the…

PriorityP422medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
4.23%
89.8th percentile
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.

Affected

23 ranges
VendorProductVersion rangeFixed in
openxopenx<= 2.8.10—
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
openxopenx——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.