CVE-2013-1409 - CVE House
Back to Database
Status published Medium CVE-2013-1409

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1409

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

commentluv
Vulnerable Versions:
0, 2.7, 2.71, 2.74, 2.76, 2.80, 2.81, 2.81.1, 2.81.2, 2.81.3, 2.81.4, 2.81.5, 2.81.6, 2.81.7, 2.81.8, 2.90.1, 2.90.3, 2.90.5, 2.90.6, 2.90.7, 2.90.8, 2.90.8.1, 2.90.8.2, 2.90.8.3, 2.90.9, 2.90.9.1, 2.90.9.2, 2.90.9.3, 2.90.9.4, 2.90.9.5, 2.90.9.6, 2.90.9.7, 2.90.9.8, 2.90.9.9, 2.90.9.9.1, 2.90.9.9.2, 2.90.9.9.3, 2.91, 2.91.1, 2.92, 2.92.1, 2.92.2, 2.761, 2.762, 2.763, 2.764, 2.765, 2.766, 2.767, 2.768, 2.769, 2.7691

Timeline

Official Publish: March 3rd, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.