PT-2021-20623 · WordPress · Wp Songbook+1

P7E4 · Published 2021-08-16 · Updated 2021-08-24 · CVE-2021-34655

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WP Songbook WordPress plugin versions up to and including 2.0.11 Custom Post Type Relations WordPress plugin versions up to and including 1.0

Description: The issue allows attackers to inject arbitrary web scripts via Reflected Cross-Site Scripting. In the WP Songbook WordPress plugin, this is possible through the url parameter in the ~/inc/class.ajax.php file. For the Custom Post Type Relations WordPress plugin, the vulnerability is exploited via the cptr[name] parameter in the ~/pages/admin-page.php file.

Recommendations: For WP Songbook WordPress plugin versions up to and including 2.0.11, update to a version later than 2.0.11 to resolve the issue. For Custom Post Type Relations WordPress plugin versions up to and including 1.0, update to a version later than 1.0 to resolve the issue. As a temporary workaround, consider restricting access to the ~/inc/class.ajax.php file in the WP Songbook WordPress plugin and the ~/pages/admin-page.php file in the Custom Post Type Relations WordPress plugin to minimize the risk of exploitation. Avoid using the url parameter in the affected WP Songbook WordPress plugin and the cptr[name] parameter in the Custom Post Type Relations WordPress plugin until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-34655

Affected Products

Custom Post Type Relations

Wp Songbook

References · 5

• 🔥 https://plugins.trac.wordpress.org/browser/wp-songbook/tags/2.0.11/inc/class.ajax.php#L21 · Exploit
• 🔥 https://wordfence.com/vulnerability-advisories/#CVE-2021-34655 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-34655 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34655 · Vendor Advisory
• https://t.me/cvenotify/19456 · Telegram Post