6.1

CVE-2013-3261: photogallerycreator flash-album-gallery Cross-site Scripting

CVSS: 6.1v3.1MediumModified
Published 01-06-2013Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2013-3261 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in photogallerycreator flash-album-gallery. EPSS estimates a 1.62% chance of exploitation in the next 30 days, higher than 75.6% of scored vulnerabilities. Fixed in 2.72.

Overall risk
25/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.1/10
010
Medium · v3.1 (wordfence)
EPSS score
1.62%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 01-06-2013
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.

CVSS metrics

2 scores · 2 sources · 2 versions

EPSS trend

Probability

1.62%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

0.00 pp

From 1.62% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Photogallerycreator1 product
  • flash-album-gallery≤ 2.71 | 0.29 | 0.32 | 0.33 | 0.34 | 0.35 | 0.36 | 0.37 | 0.38 | 0.39 | 0.39:pl1 | 0.39:pl2 | 0.39:pl3 | 0.40 | 0.41 | 0.42 | 0.43 | 0.44 | 0.45 | 0.46 | 0.49 | 0.50 | 0.52 | 0.53 | 0.54 | 0.55 | 0.56 | 0.57 | 0.58 | 0.58:pl1 | 0.59 | 0.60 | 0.61 | 1.11 | 1.12 | 1.13 | 1.20 | 1.21 | 1.22 | 1.23 | 1.31 | 1.32 | 1.33 | 1.40 | 1.41 | 1.42 | 1.43 | 1.44 | 1.45 | 1.47 | 1.48 | 1.49 | 1.50 | 1.51 | 1.52 | 1.53 | 1.54 | 1.55 | 1.56 | 1.57 | 1.58 | 1.59 | 1.60 | 1.61 | 1.62 | 1.63 | 1.64 | 1.65 | 1.66 | 1.67 | 1.70 | 1.71 | 1.72 | 1.73 | 1.74 | 1.75 | 1.76 | 1.77 | 1.78 | 1.79 | 1.80 | 1.81 | 1.82 | 1.83 | 1.84 | 1.85 | 1.90 | 2.00 | 2.10 | 2.11 | 2.12 | 2.14 | 2.15 | 2.16 | 2.17 | 2.18 | 2.50 | 2.51 | 2.52 | 2.53 | 2.54 | 2.55 | 2.56 | 2.70
Wordpress1 product
  • flash-album-gallery≤ 2.71 (fixed in 2.72)

2 vendors · 2 products

References

3 links