PT-2024-10889 · WordPress · Simple Sort&Search Wordpress Plugin

Apple502J · Published 2024-01-16 · Updated 2024-01-23 · CVE-2021-24433

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions simple sort&search WordPress plugin versions 0.0.3 and earlier

Description The issue arises from the simple sort&search WordPress plugin not validating the indexurl parameter of certain shortcodes, including category sims, order sims, orderby sims, period sims, and tag sims, to ensure they use allowed URL protocols. This oversight can lead to stored cross-site scripting, potentially exploitable by users with a role as low as Contributor.

Recommendations For versions 0.0.3 and earlier, as a temporary workaround, consider disabling the shortcodes category sims, order sims, orderby sims, period sims, and tag sims until a patch is available. Restrict access to these shortcodes to minimize the risk of exploitation. Avoid using the indexurl parameter in the affected shortcodes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24433

Affected Products

Simple Sort&Search Wordpress Plugin

References · 6

• 🔥 https://wpscan.com/vulnerability/2ce8c786-ba82-427c-b5e7-e3b300a24c5f · Exploit
• https://osv.dev/vulnerability/CVE-2021-24433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24433 · Security Note
• https://t.me/cvenotify/67640 · Telegram Post
• https://t.me/cvenotify/68418 · Telegram Post
• https://twitter.com/CVEnew/status/1747293181832822827 · Twitter Post