CVE-2013-5129

Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.

• CWE-79

• http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlVendor Advisory
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5934Vendor Advisory
• http://www.securitytracker.com/id/1029054
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlVendor Advisory
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5934Vendor Advisory
• http://www.securitytracker.com/id/1029054

Published

Sep 19, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5122Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug c…9.8
• CVE-2013-5123The mirroring support (-M, --use-mirrors) in Python Pip befo…5.9
• CVE-2013-5125WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5126WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5127WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5128WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5130WebKit in Apple Safari before 6.1 disables the Private Brows…
• CVE-2013-5131Cross-site scripting (XSS) vulnerability in WebKit in Apple …
• CVE-2013-5132Apple AirPort Base Station Firmware before 7.6.4 does not pr…
• CVE-2013-5133Backup in Apple iOS before 7.1 does not properly restrict sy…
• CVE-2013-5134Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-5135Format string vulnerability in Screen Sharing Server in Appl…