CVE-2013-1409

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:commentluv:commentluv:2.90.9.9:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.765:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.764:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.769:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.71:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.92:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.76:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.91.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.763:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.91:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.92.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.8.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.92.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.9.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.8.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.762:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.767:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.8.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.74:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.761:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.9.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.766:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.9.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.768:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.81.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.80:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.7691:*:*:*:*:wordpress:*:*
cpe:2.3:a:commentluv:commentluv:2.90.9.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

Information

Published : 2014-03-03 08:55

Updated : 2014-03-04 08:11


NVD link : CVE-2013-1409

Mitre link : CVE-2013-1409


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

commentluv

  • commentluv

wordpress

  • wordpress