VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 9, 2013· Updated Jun 16, 2026

CVE-2013-5098

CVE-2013-5098

Description

Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Wpchill/Download Monitor7 versions
    cpe:2.3:a:mikejolley:download_monitor:1.0.0:*:*:*:*:wordpress:*:*+ 6 more
    • cpe:2.3:a:mikejolley:download_monitor:1.0.0:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:1.0.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:1.0.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:1.0.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:1.0.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:1.0.5:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:mikejolley:download_monitor:*:*:*:*:*:wordpress:*:*range: <=1.0.6
  • WordPress/Download Monitorllm-fuzzy
    Range: <3.3.6.2
    Package: https://wordpress.org/plugins/download-monitor

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.