CVE-2013-4705 — Cross-site Scripting in Browser

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 51.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedSep 13
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser15.00+112

🔴Vulnerability Details

2
GHSA
GHSA-fw64-92mm-p64c: Cross-site scripting (XSS) vulnerability in Opera before 15↗2022-05-17
▶
CVEList
CVE-2013-4705: Cross-site scripting (XSS) vulnerability in Opera before 15↗2013-09-13
▶

💥Exploits & PoCs

1
Exploit-DB
CADA 3S CoDeSys Gateway Server - Directory Traversal (Metasploit)↗2013-02-02
▶
CVE-2013-4705 — Cross-site Scripting in Opera Browser | cvebase