PT-2015-5596 · WordPress · Crossslide-Jquery-Plugin-For-Wordpress

Publicado 2015-02-26 · Atualizado 2016-11-30 · CVE-2015-2089

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions crossslide-jquery-plugin-for-wordpress version 2.0.5

Description The issue allows remote attackers to hijack the authentication of administrators for requests, potentially leading to changes in plugin settings or cross-site scripting (XSS) attacks. This is achieved via the csj width, csj height, csj sleep, csj fade, or upload image parameter in the "thisismyurl csj.php" page to "wp-admin/options-general.php".

Recommendations For crossslide-jquery-plugin-for-wordpress version 2.0.5, consider disabling the plugin until a patch is available to prevent potential exploitation. As a temporary workaround, restrict access to the "thisismyurl csj.php" page and the parameters csj width, csj height, csj sleep, csj fade, and upload image to minimize the risk of hijacking administrator authentication.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-2089

Produtos afetados

Crossslide-Jquery-Plugin-For-Wordpress

Referências · 4

• 🔥 http://packetstormsecurity.com/files/130313/WordPress-Cross-Slide-2.0.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• http://securityfocus.com/bid/74894 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2089 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2089 · Nota