CVE-2013-3261

Published Jun 1, 2013 CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-3198 Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Sep 16, 2024, 8:53 PM
Reserved
Apr 22, 2013, 12:00 AM
Status
Modified
Published
Jun 1, 2013, 2:21 PM
Modified
Jun 16, 2026, 11:54 PM