PT-2023-16328 · WordPress · Rapidexpcart

Shreya Pohekar · Published 2023-05-15 · Updated 2025-01-24 · CVE-2023-0520

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RapidExpCart WordPress plugin versions through 1.0

Description The issue is related to a Stored Cross-Site Scripting vulnerability. It occurs because the url parameter in the "rapidexpcart" endpoint is not properly sanitized and escaped before being stored and outputted back in the page. This could be exploited against high-privilege users, such as admins. Additionally, the lack of CSRF protection allows an attacker to trick a logged-in admin into performing the attack by submitting a hidden form.

Recommendations For RapidExpCart WordPress plugin versions through 1.0, consider disabling the "rapidexpcart" endpoint until a patch is available. Restrict access to the url parameter in the affected endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the url parameter in the "rapidexpcart" endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2023-0520

Affected Products

Rapidexpcart

References · 5

• 🔥 https://wpscan.com/vulnerability/be4f7ff9-af79-477b-9f47-e40e25a3558e · Exploit
• https://osv.dev/vulnerability/CVE-2023-0520 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0520 · Security Note
• https://t.me/cibsecurity/64129 · Telegram Post
• https://t.me/cvenotify/108539 · Telegram Post