CVE-2013-6281
published 2013-10-25CVE-2013-6281: Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to…
PriorityP423medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
5.22%
91.5th percentile
Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dhtmlx | dhtmlxspreadsheet | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
WordPress Spreadsheet - Cross-Site Scripting
nuclei·CVSS 4.3
CVE-2013-6281 [MEDIUM] WordPress Spreadsheet - Cross-Site Scripting
WordPress Spreadsheet - Cross-Site Scripting
WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php.
Template:
id: CVE-2013-6281
info:
name: WordPress Spreadsheet - Cross-Site Scripting
author: random-robbie
severity: medium
description: |
WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php.
impact: |
Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the affected WordPress site, leading to potential data theft, session hijacking, or defacement.
remediation: |
Update the WordPress Spreadsheet plugin to the latest version, which includes proper input sanitization to mitigate the XS
http://osvdb.org/98831http://packetstormsecurity.com/files/123699/WordPress-dhtmlxspreadsheet-Cross-Site-Scripting.htmlhttp://secunia.com/advisories/55396http://osvdb.org/98831http://packetstormsecurity.com/files/123699/WordPress-dhtmlxspreadsheet-Cross-Site-Scripting.htmlhttp://secunia.com/advisories/55396
2013-10-25
Published