CVE-2013-2501

MEDIUM 4.3 CVSS 2.0

Published: March 22, 2013
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field.

Affected WordPress components

terillion-reviews Plugin · terillion-reviews

Confirmed match Homeless

Versions not specified
View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

n/a n/a — Versions not specified

References

archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-03/0055.html Exploit
osvdb.org http://osvdb.org/91123
packetstormsecurity.com http://packetstormsecurity.com/files/120730/WordPress-Terillion-Reviews-Cross-Site-Scripting.html
plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset/683838/terillion-reviews
wordpress.org http://wordpress.org/extend/plugins/terillion-reviews/changelog/ Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/58415 Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/82727
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected WordPress components

Affected products and versions

References