Unrated severityNVD Advisory· Published Mar 13, 2014· Updated Jun 16, 2026
CVE-2013-3728
CVE-2013-3728
Description
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new_category action to admin.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:kasseler-cms:kasseler-cms:*:r1223:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kasseler-cms:kasseler-cms:*:r1223:*:*:*:*:*:*range: <=2
- (no CPE)range: < r1232
Patches
Vulnerability mechanics
References
7- diff.kasseler-cms.net/svn/patches/1232.htmlnvdPatchVendor Advisory
- seclists.org/bugtraq/2013/Jul/26nvdExploit
- www.htbridge.com/advisory/HTB23158nvdExploit
- diff.kasseler-cms.net/svn.htmlnvd
- osvdb.org/94780nvd
- packetstormsecurity.com/files/122282/Kasseler-CMS-2-r1223-CSRF-XSS-SQL-Injection.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/85408nvd
News mentions
0No linked articles in our index yet.