PT-2021-11867 · WordPress · Newsletters

Ramuel Gall · CVE-2020-35933 · Published 2021-01-01 · Updated 2023-05-18

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AC:L/AV:N/A:L/C:L/I:L/PR:L/S:C/UI:R

Name of the Vulnerable Software and Affected Versions: Newsletter plugin versions prior to 6.8.2 for WordPress

Description: A Reflected Authenticated Cross-Site Scripting (XSS) issue allows remote attackers to trick a victim into submitting a tnpc render AJAX request. This request can contain either JavaScript in the options parameter or a base64-encoded JSON string containing JavaScript in the encoded options parameter.

Recommendations: For versions prior to 6.8.2, update to version 6.8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the tnpc render AJAX endpoint until a patch is applied. Avoid using the options and encoded options parameters in the affected AJAX request until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-35933

Affected Products

Newsletters

References · 6

• 🔥 https://wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites · Exploit
• https://osv.dev/vulnerability/CVE-2020-35933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35933 · Security Note
• https://t.me/cvenotify/50737 · Telegram Post
• https://t.me/cibsecurity/21497 · Telegram Post
• https://t.me/cvenotify/8074 · Telegram Post