CVE-2013-6837

Published: Dec 19, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to the default URI.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.rafayhackingarticles.net/2013/05/kali-linux-dom-based-xss-writeup.html

x_refsource_MISC

http://www.no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/

x_refsource_CONFIRM

http://themeforest.net/item/udesign-responsive-wordpress-theme/253220

x_refsource_CONFIRM

http://themeforest.net/forums/thread/security-vulnerability-affecting-prettyphoto-jquery-script/181180

x_refsource_MISC

http://cxsecurity.com/issue/WLB-2013110149

x_refsource_MISC

http://www.perucrack.net/2014/07/haciendo-un-xss-en-plugin-prettyphoto.html

x_refsource_MISC

https://github.com/Duncaen/prettyphoto/commit/3ef0ddfefebbcc6bbe9245f9cea87e26838e9bbc

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2013-6837

Description

Affected Products

References