CVE-2013-6281
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 5.2%
exploitation probability
5.2%top 8% of all CVEs
observed exploitation
nono source reports it
Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter.
Affected products
n/a · n/a