CVE-2013-2205
EPSS 0.59%Published: 7/8/2013Modified: 5/27/2026
Description
The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
Affected packages (1)
- Debian/wordpressfrom 0, < 3.5.2+dfsg-1