Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2013-6780

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.

  • Published: Nov 13, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-6780
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
yahoo / yui 2.5.2 2.5.2.x
yahoo / yui 2.7.0 2.7.0.x
yahoo / yui 2.5.1 2.5.1.x
yahoo / yui 2.8.0 2.8.0.x
yahoo / yui 2.5.0 2.5.0.x
yahoo / yui 2.9.0 2.9.0.x
yahoo / yui 2.8.2 2.8.2.x
yahoo / yui 2.8.1 2.8.1.x
yahoo / yui 2.6.0 2.6.0.x