PT-2015-5596 · WordPress · Crossslide-Jquery-Plugin-For-Wordpress

Published 2015-02-26 · Updated 2016-11-30 · CVE-2015-2089

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions crossslide-jquery-plugin-for-wordpress version 2.0.5

Description The issue allows remote attackers to hijack the authentication of administrators for requests, potentially leading to changes in plugin settings or cross-site scripting (XSS) attacks. This is achieved via the csj width, csj height, csj sleep, csj fade, or upload image parameter in the "thisismyurl csj.php" page to "wp-admin/options-general.php".

Recommendations For crossslide-jquery-plugin-for-wordpress version 2.0.5, consider disabling the plugin until a patch is available to prevent potential exploitation. As a temporary workaround, restrict access to the "thisismyurl csj.php" page and the parameters csj width, csj height, csj sleep, csj fade, and upload image to minimize the risk of hijacking administrator authentication.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-2089

Affected Products

Crossslide-Jquery-Plugin-For-Wordpress

References · 4

• 🔥 http://packetstormsecurity.com/files/130313/WordPress-Cross-Slide-2.0.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2089 · Security Note
• http://securityfocus.com/bid/74894 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2089 · Note