PT-2023-16328 · WordPress · Rapidexpcart

Shreya Pohekar · Publicado 2023-05-15 · Atualizado 2025-01-24 · CVE-2023-0520

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RapidExpCart WordPress plugin versions through 1.0

Description The issue is related to a Stored Cross-Site Scripting vulnerability. It occurs because the url parameter in the "rapidexpcart" endpoint is not properly sanitized and escaped before being stored and outputted back in the page. This could be exploited against high-privilege users, such as admins. Additionally, the lack of CSRF protection allows an attacker to trick a logged-in admin into performing the attack by submitting a hidden form.

Recommendations For RapidExpCart WordPress plugin versions through 1.0, consider disabling the "rapidexpcart" endpoint until a patch is available. Restrict access to the url parameter in the affected endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the url parameter in the "rapidexpcart" endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2023-0520

Produtos afetados

Rapidexpcart

Referências · 5

• 🔥 https://wpscan.com/vulnerability/be4f7ff9-af79-477b-9f47-e40e25a3558e · Exploit
• https://osv.dev/vulnerability/CVE-2023-0520 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-0520 · Nota de Segurança
• https://t.me/cibsecurity/64129 · Publicação no Telegram
• https://t.me/cvenotify/108539 · Publicação no Telegram