CVE-2013-4335: opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities

Security readout for executives and security teams

CVE-2013-4335 is a set of XML External Entity issues in opOpenSocialPlugin. If an organization still runs one of the listed vulnerable versions, XML processing may expose sensitive data or internal resources. The bundle names fixed versions, but provides no CVSS score or active-exploitation evidence. Exposure is likely limited to systems that still deploy opOpenSocialPlugin in the vulnerable version ranges. The source bundle does not identify affected hosting environments, default configurations, public attack surface, or dependent platforms beyond the plugin itself. Treat this as targeted technical debt unless the plugin is confirmed in use. If present on internet-facing or sensitive systems, prioritize remediation because XXE can affect confidentiality and internal service exposure. No active-exploitation evidence is provided in the bundle. Mitigation focus: Inventory applications for opOpenSocialPlugin and record exact installed versions.; Upgrade to the fixed version matching the deployed branch, where applicable.; If upgrade status is unclear, check current vendor or project guidance..

Prepared

Jun 6, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.