PT-2017-6671 · WordPress · Wordpress Eshop Plugin

Published 2017-07-21 · Updated 2017-07-26 · CVE-2015-3421

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wordpress Eshop plugin versions 6.3.11 and earlier

Description The issue concerns the eshop checkout function in the Wordpress Eshop plugin, which fails to validate variables in the "eshopcart" HTTP cookie. This allows remote attackers to perform cross-site scripting (XSS) attacks or disclose paths via crafted variables named after target PHP variables.

Recommendations For Wordpress Eshop plugin versions 6.3.11 and earlier, consider disabling the eshop checkout function in checkout.php until a patch is available. Restrict access to the "eshopcart" HTTP cookie to minimize the risk of exploitation. Avoid using crafted variables named after target PHP variables in the affected cookie until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-3421

Affected Products

Wordpress Eshop Plugin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3421 · Security Note
• http://securityfocus.com/bid/74477 · Note
• https://htbridge.com/advisory/HTB23255 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3421 · Note