VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jan 2, 2020· Updated Jun 16, 2026

CVE-2013-0737

CVE-2013-0737

Description

Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.

Affected products

3
  • Boltwire/Boltwire3 versions
    cpe:2.3:a:boltwire:boltwire:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:boltwire:boltwire:*:*:*:*:*:*:*:*range: <=3.5
    • (no CPE)range: <=3.5
    • (no CPE)range: 3.5 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.