PT-2014-2999 · Automattic+1 · Wordpress+1

Published 2014-05-08 · Updated 2014-05-09 · CVE-2013-5916

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bradesco Gateway plugin version 2.0 for Wordpress

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploited via the QUERY STRING.

Recommendations For Bradesco Gateway plugin version 2.0, update the plugin to a version that fixes this issue, or consider disabling the falha.php file as a temporary workaround to prevent exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-5916

Affected Products

Bradesco Gateway Plugin

Wordpress

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-09/0112.html · Exploit
• 🔥 http://securityfocus.com/bid/62617 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5916 · Security Note
• http://osvdb.org/97624 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5916 · Note