CVE-2013-0237

no score yetEPSS 3.1%

No CVSS score yet. EPSS 3.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2013-07-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:fedora
moxiecode:plupload
wordpress:wordpress

References

http://codex.wordpress.org/Version_3.5.1
http://wordpress.org/news/2013/01/wordpress-3-5-1/
https://bugzilla.redhat.com/show_bug.cgi?id=904122
https://github.com/moxiecode/plupload/commit/2d746ee9083c184f1234d8fed311e89bdd1b39e5
http://codex.wordpress.org/Version_3.5.1

Check your stack JSON