CVE-2013-2651

EUVD-2013-2590
Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content parameter to index.php.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
boltwireboltwire
𝑥
≤ 3.5
boltwireboltwire
3.0
boltwireboltwire
3.01
boltwireboltwire
3.02
boltwireboltwire
3.2.0
boltwireboltwire
3.2.1
boltwireboltwire
3.2.2
boltwireboltwire
3.2.3
boltwireboltwire
3.2.4
boltwireboltwire
3.2.5
boltwireboltwire
3.2.6
boltwireboltwire
3.2.7
boltwireboltwire
3.2.8
boltwireboltwire
3.2.9
boltwireboltwire
3.2.10
boltwireboltwire
3.2.11
boltwireboltwire
3.03
boltwireboltwire
3.3
boltwireboltwire
3.3.1
boltwireboltwire
3.3.2
boltwireboltwire
3.3.3
boltwireboltwire
3.3.4
boltwireboltwire
3.3.5
boltwireboltwire
3.3.6
boltwireboltwire
3.3.7
boltwireboltwire
3.3.8
boltwireboltwire
3.3.9
boltwireboltwire
3.4
boltwireboltwire
3.04
boltwireboltwire
3.4.1
boltwireboltwire
3.4.2
boltwireboltwire
3.4.3
boltwireboltwire
3.4.4
boltwireboltwire
3.4.5
boltwireboltwire
3.4.6
boltwireboltwire
3.4.7
boltwireboltwire
3.4.8
boltwireboltwire
3.4.9
boltwireboltwire
3.4.10
boltwireboltwire
3.4.11
boltwireboltwire
3.4.12
boltwireboltwire
3.4.13
boltwireboltwire
3.4.14
boltwireboltwire
3.4.15
boltwireboltwire
3.4.16
boltwireboltwire
3.05
boltwireboltwire
3.06
boltwireboltwire
3.07
boltwireboltwire
3.08
boltwireboltwire
3.09
boltwireboltwire
3.10
boltwireboltwire
3.11
boltwireboltwire
3.12
boltwireboltwire
3.13
boltwireboltwire
3.14
boltwireboltwire
3.15
boltwireboltwire
3.16
boltwireboltwire
3.17
boltwireboltwire
3.18
𝑥
= Vulnerable software versions