Unscored severity · published Apr 2, 2013
CVE-2013-1808
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS,…
–
CVSS
7.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is might be the same vulnerability as CVE-2013-1463. If so, it is likely that CVE-2013-1463 will be REJECTed.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zeroclipboard · Zeroclipboard Project
through 1.0.7; 1.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1808
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1808
seclists.org
http://seclists.org/fulldisclosure/2013/Apr/87
seclists.org
http://seclists.org/fulldisclosure/2013/Apr/88
seclists.org
http://seclists.org/fulldisclosure/2013/Feb/103
seclists.org
http://seclists.org/fulldisclosure/2013/Feb/109
seclists.org
http://seclists.org/fulldisclosure/2013/Mar/5
securityvulns.ru
http://securityvulns.ru/docs29103.html
More from Zeroclipboard
–
CVE-2014-1869
Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M
–
CVE-2012-6550
Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash…