CVE-2013-1636

Severity CVSS v4.0:
Pending analysis
Type:
CWE-79 Cross-Site Scripting (XSS)
Publication date:
12/03/2014
Last modified:
12/04/2025

Description

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers to inject arbitrary web script or HTML via the get-data parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:caseproof:prettylinks:*:*:*:*:*:*:*:* 1.6.2 (including)
cpe:2.3:a:caseproof:prettylinks:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:caseproof:prettylinks:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:joobi:com_jnews:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:civicrm:civicrm:3.2.3:*:*:*:*:*:*:*