Published: 22/03/2013 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin prior to 1.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the ProfileId field.

Vulnerable Product	Search on Vulmon	Subscribe to Product
terillion terillion_reviews_plugin

source: wwwsecurityfocuscom/bid/58415/info The Terillion Reviews plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content Successful exploits will allow attacker-supplied HTML and script code to run in the context of the af ...

WordPress Terillion Reviews plugin suffers from a persistent cross site scripting vulnerability ...

CWE-79 http://www.securityfocus.com/bid/58415 http://archives.neohapsis.com/archives/bugtraq/2013-03/0055.html http://wordpress.org/extend/plugins/terillion-reviews/changelog/http://packetstormsecurity.com/files/120730/WordPress-Terillion-Reviews-Cross-Site-Scripting.html http://osvdb.org/91123 http://plugins.trac.wordpress.org/changeset/683838/terillion-reviews https://exchange.xforce.ibmcloud.com/vulnerabilities/82727 https://nvd.nist.gov https://www.exploit-db.com/exploits/38373/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-2501

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect