CVE-2013-4954
Pie Register <= 1.30 - Multiple Cross-Site Scripting
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.
Múltiples vulnerabilidades XSS en el plugin Genetech Solutions Pie-Register anterior a 1.31 para WordPress, cuando "los nuevos registros pueden establecer su propia contraseña" está activado, permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarias a través de los parámetros (1) pass1 o (2) pass2 en una acción de registro. NOTA: Esta información ha sido obtenida a partir de terceros.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-07-12 First Exploit
- 2013-07-29 CVE Reserved
- 2013-07-29 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/95160 | Vdb Entry | |
| http://wordpress.org/plugins/pie-register/changelog | X_refsource_confirm | |
| http://wordpress.org/support/topic/security-issue-web-application-cross-site-scripting | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/85604 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/38643 | 2013-07-12 | |
| http://plugins.trac.wordpress.org/changeset?reponame=&old=740249%40pie-register&new=740249%40pie-register | 2024-08-06 | |
| http://www.securityfocus.com/bid/61140 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/54123 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | <= 1.30 Search vendor "Genetechsolutions" for product "Pie-register" and version " <= 1.30" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.0.1 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.0.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.1 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.2 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.2" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.3 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.3" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.5 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.5" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.6 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.6" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.7 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.7" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.8 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.8" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.9 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.9" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.1.9 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.1.9" | a |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.0 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.0" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.1 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.2 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.2" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.3 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.3" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.4 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.4" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.6 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.6" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.7 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.7" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.8 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.8" | beta |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.9 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.9" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.9 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.9" | a |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|
| Genetechsolutions Search vendor "Genetechsolutions" | Pie-register Search vendor "Genetechsolutions" for product "Pie-register" | 1.2.91 Search vendor "Genetechsolutions" for product "Pie-register" and version "1.2.91" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | - | - |
Safe
|