CVE-2013-10026

CVSS V2 None CVSS V3 None
Description
A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue affects some unknown processing of the file index.php. The manipulation of the argument sml_name/sml_email leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.1 is able to address this issue. The name of the patch is 484970ef8285cae51d2de3bd4e4684d33c956c28. It is recommended to upgrade the affected component. The identifier VDB-227765 was assigned to this vulnerability.
Overview
  • CVE ID
  • CVE-2013-10026
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-02T02:15:27
  • Last Modified Date
  • 2023-05-02T02:15:27
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
References
Reference URL Reference Tags
https://github.com/wp-plugins/mail-subscribe-list/commit/484970ef8285cae51d2de3bd4e4684d33c956c28
https://vuldb.com/?ctiid.227765
https://vuldb.com/?id.227765
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2013-10026
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-10026
History
Created Old Value New Value Data Type Notes
2023-05-02 03:00:51 Added to TrackCVE
2023-05-02 03:00:51 Weakness Enumeration new