Unscored severity · published Aug 9, 2013
CVE-2013-4759
Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) fullname, or (3) email parameter to magnoliaPublic/demo-project/members-area/registration.html.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Magnolia Form Module · Magnolia-cms
1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.4.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4759
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4759
Exploit
http://archives.neohapsis.com/archives/bugtraq/2013-07/0160.html
osvdb.org
http://osvdb.org/95628
Exploit
http://packetstormsecurity.com/files/122527/Magnolia-CMS-5.0.1-Community-Edition-Cross-Site-Scripting.html
Exploit
http://www.securityfocus.com/bid/61423
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85940
Exploit
https://www.htbridge.com/advisory/HTB23163