CVE-2013-7319

{"id": "CVE-2013-7319", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-02-06T16:10:59.013", "references": [{"url": "http://secunia.com/advisories/55969", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://wordpress.org/plugins/download-manager/changelog", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/30105", "source": "cve@mitre.org"}, {"url": "http://www.nerdbox.it/wordpress-download-manager-xss", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/64159", "source": "cve@mitre.org"}, {"url": "http://www.wpdownloadmanager.com/support/topic/security-issue-found-who-to-contact", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89524", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field."}, {"lang": "es", "value": "Vulnerabilidad de XSS en el plugin Download Manager anterior a 2.5.9 para WordPress permite a atacantes remotos inyectar script Web o HTML arbitrario a trav\u00e9s del campo \"title\"."}], "lastModified": "2020-05-05T12:10:51.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "90EE4176-CCC3-42A6-8114-B3CF46FEADCE", "versionEndIncluding": "2.5.8"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.0:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "DE475437-88D7-48D0-BC00-1190242322C0"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "2CC0AC5C-883D-493E-8EE3-55A2E9FFBA27"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.2:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "B0034A8E-8901-49C1-AD3F-05BD128F2513"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8865E18A-6800-4CBF-B247-1A0C3B02837F"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.4:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "54205B74-3A17-46F1-9D8D-67B032576B74"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.5:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "11A1C938-9AD2-4428-8609-FA63D120A66A"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.6:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "BC37CF22-B4E7-4423-A5BF-2FADFF73C339"}, {"criteria": "cpe:2.3:a:wpdownloadmanager:wordpress_download_manager:2.5.7:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "2025EA33-F3BA-4EDF-A442-611FF0F28817"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}