CVE Database /
CVE-2013-2008
CVE · Medium
CVE-2013-2008 — WP Super Cache [wp-super-cache] < 1.3.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2013-2008
|
WP Super Cache [wp-super-cache] < 1.3.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 1.3.1
|
1.3.1 |
2014-08-01 |
—
|
CVE-2013-2008
WP Super Cache versions before 1.3.1 contain multiple cross-site scripting vulnerabilities arising from insufficient sanitization of URI parameters across several plugin files including wptouch.php, searchengine.php, domain-mapping.php, badbehaviour.php, awaitingmoderation.php, and wp-cache.php. The wp_nonce_url function is also susceptible to URI-based XSS attacks. Users should upgrade to version 1.3.1 or later to eliminate these flaws.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings