PT-2021-15978 · WordPress · W3 Total Cache

Renniepak · Published 2021-07-19 · Updated 2021-07-28 · CVE-2021-24452

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions W3 Total Cache WordPress plugin versions prior to 2.1.5

Description The issue is a reflected Cross-Site Scripting (XSS) problem within the extension parameter in the Extensions dashboard. This occurs when the 'Anonymously track usage to improve product quality' setting is enabled, and the parameter is output in a JavaScript context without proper escaping. An attacker could exploit this by convincing an authenticated admin to click a link, allowing the attacker to run malicious JavaScript within the user's web browser, potentially leading to full site compromise.

Recommendations For versions prior to 2.1.5, update to version 2.1.5 or later to resolve the issue. As a temporary workaround, consider disabling the 'Anonymously track usage to improve product quality' setting until a patch is applied. Restrict access to the Extensions dashboard to minimize the risk of exploitation. Avoid using the extension parameter in the affected dashboard until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24452

Affected Products

W3 Total Cache

References · 5

• 🔥 https://wpscan.com/vulnerability/3e855e09-056f-45b5-89a9-d644b7d8c9d0 · Exploit
• https://osv.dev/vulnerability/CVE-2021-24452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24452 · Security Note
• https://t.me/cvenotify/18243 · Telegram Post
• https://t.me/cibsecurity/26244 · Telegram Post