CVE-2013-7279

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.96%

Published

Jan 8, 2014

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.983 for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.

Weaknesses (CWE)

CWE-79

Affected Products (4)

anthony_mills · s3_videovulnerable

wordpress · wordpress

References (10)

http://plugins.trac.wordpress.org/changeset?old_path=%2Fs3-video&old=823847&new_path=%2Fs3-video&new=823847

http://secunia.com/advisories/56167

Vendor Advisory

http://wordpress.org/plugins/s3-video/changelog

Vendor Advisory

http://www.securityfocus.com/bid/64420

https://exchange.xforce.ibmcloud.com/vulnerabilities/89866

http://plugins.trac.wordpress.org/changeset?old_path=%2Fs3-video&old=823847&new_path=%2Fs3-video&new=823847

http://secunia.com/advisories/56167

Vendor Advisory

http://wordpress.org/plugins/s3-video/changelog

Vendor Advisory

http://www.securityfocus.com/bid/64420

https://exchange.xforce.ibmcloud.com/vulnerabilities/89866

KEV Catalog EPSS Scores Vendors All CVEs