XSS in Slickremix Design Approval System Plugin

CVE-2013-5711

Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2013-5711?
CVE-2013-5711 is a vulnerability in Slickremix Design Approval System Plugin, classified under Cross-site Scripting. Published 2013-09-17.
Is CVE-2013-5711 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.