CVE-2013-6281 dhtmlxSpreadsheet <= 2.0 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dhtmlxspreadsheet | = 2.0 | No fix listed |
| wordpress dhtmlxspreadsheet(WordPress) | <= 2.0 | No fix listed |
References
- 98831 vdb-entry
- packetstormsecurity.com exploit
- 55396 third-party-advisory vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org