PT-2022-25318 · WordPress · Simple:Press

Andreas Krüger + 1 · Published 2022-11-29 · Updated 2022-12-01 · CVE-2022-4028

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple:Press plugin for WordPress versions up to, and including, 6.8

Description The issue allows for Stored Cross-Site Scripting via the postitem parameter when modifying a profile signature. This is due to insufficient input sanitization and output escaping, making it possible to inject object and embed tags. Authenticated attackers with minimal permissions can inject arbitrary web scripts in pages, which will execute when a user accesses an injected page.

Recommendations For versions up to, and including, 6.8, consider disabling the profile signature modification feature until a patch is available to prevent exploitation. Restrict access to the postitem parameter to minimize the risk of arbitrary web script injection. Avoid using the postitem parameter in the profile-save action until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4028

Affected Products

Simple:Press

References · 7

• https://osv.dev/vulnerability/CVE-2022-4028 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2804020%40simplepress&new=2804020%40simplepress&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4028 · Security Note
• https://t.me/cvenotify/38724 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/e77082a7-dd65-40e9-a1be-0144afa869ef?source=cve · Note
• https://t.me/cvenotify/38879 · Telegram Post
• https://wordfence.com/vulnerability-advisories-continued/#CVE-2022-4028 · Note