PT-2022-14256 · WordPress · Dx Share Selection

Sho Sakata · Published 2022-07-18 · Updated 2023-10-24 · CVE-2022-2001

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DX Share Selection plugin for WordPress versions up to, and including 1.4

Description The issue is due to missing nonce protection on the dxss admin page() function found in the ~/dx-share-selection.php file, making it possible for unauthenticated attackers to inject malicious web scripts into the page. This can happen if an attacker can trick a site's administrator into performing an action such as clicking on a link.

Recommendations For versions up to, and including 1.4, consider disabling the dxss admin page() function until a patch is available to prevent exploitation. Restrict access to the ~/dx-share-selection.php file to minimize the risk of malicious script injection. Avoid performing actions that could be triggered by an attacker, such as clicking on suspicious links, to reduce the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-2001

Affected Products

Dx Share Selection

References · 9

• https://osv.dev/vulnerability/CVE-2022-2001 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/2747572/dx-share-selection/trunk?contextall=1&old=2384535&old_path=%2Fdx-share-selection%2Ftrunk · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-2001 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/6a85fe7f-2d28-4509-99f2-875cb63c6500?source=cve · Note
• https://t.me/cibsecurity/46481 · Telegram Post
• https://plugins.trac.wordpress.org/browser/dx-share-selection/trunk/dx-share-selection.php#L284 · Note
• https://t.me/cvenotify/33743 · Telegram Post
• https://wordpress.org/plugins/dx-share-selection · Note
• https://wordfence.com/vulnerability-advisories/#CVE-2022-2001 · Note