CVEvulnerability

CVE-2013-3261

4.3 MEDIUM Published 2013-06-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-06-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.

Affected configurations

• photogallerycreator flash-album-gallery (<= 2.71) • photogallerycreator flash-album-gallery 0.29 • photogallerycreator flash-album-gallery 0.32 • photogallerycreator flash-album-gallery 0.33 • photogallerycreator flash-album-gallery 0.34 • photogallerycreator flash-album-gallery 0.35 • photogallerycreator flash-album-gallery 0.36 • photogallerycreator flash-album-gallery 0.37 • photogallerycreator flash-album-gallery 0.38 • photogallerycreator flash-album-gallery 0.39 • photogallerycreator flash-album-gallery 0.40 • photogallerycreator flash-album-gallery 0.41 • photogallerycreator flash-album-gallery 0.42 • photogallerycreator flash-album-gallery 0.43 • photogallerycreator flash-album-gallery 0.44 • photogallerycreator flash-album-gallery 0.45 • photogallerycreator flash-album-gallery 0.46 • photogallerycreator flash-album-gallery 0.49 • photogallerycreator flash-album-gallery 0.50 • photogallerycreator flash-album-gallery 0.52 • photogallerycreator flash-album-gallery 0.53 • photogallerycreator flash-album-gallery 0.54 • photogallerycreator flash-album-gallery 0.55 • photogallerycreator flash-album-gallery 0.56 • photogallerycreator flash-album-gallery 0.57 • photogallerycreator flash-album-gallery 0.58 • photogallerycreator flash-album-gallery 0.59 • photogallerycreator flash-album-gallery 0.60 • photogallerycreator flash-album-gallery 0.61 • photogallerycreator flash-album-gallery 1.11 • photogallerycreator flash-album-gallery 1.12 • photogallerycreator flash-album-gallery 1.13 • photogallerycreator flash-album-gallery 1.20 • photogallerycreator flash-album-gallery 1.21 • photogallerycreator flash-album-gallery 1.22 • photogallerycreator flash-album-gallery 1.23 • photogallerycreator flash-album-gallery 1.31 • photogallerycreator flash-album-gallery 1.32 • photogallerycreator flash-album-gallery 1.33 • photogallerycreator flash-album-gallery 1.40 • photogallerycreator flash-album-gallery 1.41 • photogallerycreator flash-album-gallery 1.42 • photogallerycreator flash-album-gallery 1.43 • photogallerycreator flash-album-gallery 1.44 • photogallerycreator flash-album-gallery 1.45 • photogallerycreator flash-album-gallery 1.47 • photogallerycreator flash-album-gallery 1.48 • photogallerycreator flash-album-gallery 1.49 • photogallerycreator flash-album-gallery 1.50 • photogallerycreator flash-album-gallery 1.51 • photogallerycreator flash-album-gallery 1.52 • photogallerycreator flash-album-gallery 1.53 • photogallerycreator flash-album-gallery 1.54 • photogallerycreator flash-album-gallery 1.55 • photogallerycreator flash-album-gallery 1.56 • photogallerycreator flash-album-gallery 1.57 • photogallerycreator flash-album-gallery 1.58 • photogallerycreator flash-album-gallery 1.59 • photogallerycreator flash-album-gallery 1.60 • photogallerycreator flash-album-gallery 1.61 … and 40 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References