CVE-2013-6342

Exploit

EPSS 0.35%
Veröffentlicht 22.11.2013 20:55:10
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Tweet Blender <= 4.0.1 - Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-admin/options-general.php.

Mögliche Gegenmaßnahme

Tweet Blender: Update to version 4.0.2, or a newer patched version

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Weitere Schwachstelleninformationen

SystemWordPress Plugin

≫

Produkt Tweet Blender

Version * - 4.0.1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tweet-blender ≫ Tweet-blender Update- Edition- SwEdition- SwPlatformwordpress Version <= 4.0.1

Tweet-blender ≫ Tweet-blender Version2.0.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.0.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.0.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.0.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.0.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.0.5 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.1.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.1.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.2.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.2.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.2.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.2.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.3.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.5 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.6 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version2.4.7 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.5 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.6 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.7 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.0.8 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.5 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.6 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.7 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.8 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.9 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.10 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.11 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.12 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.13 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.14 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.15 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.16 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.17 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.1.18 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.2.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.2.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.2.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.2.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.2.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.0 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.1 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.2 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.3 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.4 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.5 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.6 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.7 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.8 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.9 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.10 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.11 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.12 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.13 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.14 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version3.3.15 Update- Edition- SwEdition- SwPlatformwordpress

Tweet-blender ≫ Tweet-blender Version4.0.0 Update- Edition- SwEdition- SwPlatformwordpress

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.542

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://archives.neohapsis.com/archives/bugtraq/2013-11/0072.html

Exploit

http://secunia.com/advisories/55780

Vendor Advisory

http://wordpress.org/plugins/tweet-blender/changelog

Patch

https://www.htbridge.com/advisory/HTB23180

Exploit

https://www.wordfence.com/threat-intel/vulnerabilities/id/af838653-d575-48fc-bded-f0068a6c6ebf

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-6342

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6342

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6342

EUVD