CVE-2013-1466

N/A Unknown
Published: February 05, 2014 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2013-02/0093.html
Source: cve@mitre.org
http://packetstormsecurity.com/files/120423/glFusion-1.2.2-Cross-Site-Scripting.html
Source: cve@mitre.org
http://secunia.com/advisories/52255
Source: cve@mitre.org
Vendor Advisory
http://www.exploit-db.com/exploits/24536
Source: cve@mitre.org
http://www.glfusion.org/article.php/glf122_update_20130130_01
Source: cve@mitre.org
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82211
Source: cve@mitre.org
https://www.htbridge.com/advisory/HTB23142
Source: cve@mitre.org
http://archives.neohapsis.com/archives/bugtraq/2013-02/0093.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://packetstormsecurity.com/files/120423/glFusion-1.2.2-Cross-Site-Scripting.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/52255
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.exploit-db.com/exploits/24536
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.glfusion.org/article.php/glf122_update_20130130_01
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82211
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.htbridge.com/advisory/HTB23142
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
8.7%
93th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

glfusion

Related CVEs

CVE-2026-7182 N/A
CVE-2026-41553 N/A
CVE-2026-41552 N/A
CVE-2026-8503 N/A
CVE-2026-8454 N/A