What is CVE-2013-3261?

CVE-2013-3261 is a vulnerability in Photogallerycreator Flash-Album-Gallery, classified under Cross-site Scripting. Published 2013-06-01.

Is CVE-2013-3261 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Photogallerycreator Flash-Album-Gallery

CVE-2013-3261

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

Photogallerycreator Flash-album-gallery — versions 0.29, 0.32, 0.33
Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-3261?: CVE-2013-3261 is a vulnerability in Photogallerycreator Flash-Album-Gallery, classified under Cross-site Scripting. Published 2013-06-01.
Is CVE-2013-3261 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.