PT-2022-13433 · WordPress · Searchiq

Cydave · Published 2022-04-18 · Updated 2022-04-27 · CVE-2022-0780

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SearchIQ WordPress plugin versions prior to 3.9

Description The issue allows unauthenticated attackers to access the siq ajax AJAX action due to a flag that disables the verification of CSRF nonces. This enables them to perform Cross-Site Scripting attacks because of the lack of sanitization and escaping in the customCss parameter.

Recommendations For versions prior to 3.9, update to version 3.9 or later to resolve the issue. As a temporary workaround, consider disabling the siq ajax AJAX action until a patch is available. Restrict access to the customCss parameter in the affected AJAX endpoint to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-0780

Affected Products

Searchiq

References · 4

• 🔥 https://wpscan.com/vulnerability/0ee7d1a8-9782-4db5-b055-e732f2763825 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0780 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0780 · Vendor Advisory
• https://t.me/cibsecurity/41058 · Telegram Post