PT-2024-18296 · WordPress · Nextend Social Login/Register

Kun_19

+1

·

Published

2024-03-02

·

Updated

2025-01-16

·

CVE-2024-1775

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Nextend Social Login and Register plugin for WordPress versions up to, and including, 3.1.12
Description The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the error description parameter due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers, with access to a subscriber-level account, to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Successful exploitation requires "Debug mode" to be enabled in the plugin's "Global Settings". The vulnerability can be exploited against an OAuth pre-authenticated higher-level user, such as an administrator, by leveraging a cross-site request forgery in conjunction with a certain social engineering technique to achieve a critical impact scenario, including cross-site scripting to administrator-level account creation.
Recommendations For versions up to, and including, 3.1.12, update the plugin to a version that fixes the vulnerability. As a temporary workaround, consider disabling the "Debug mode" in the plugin's "Global Settings" until a patch is available. Restrict access to the error description parameter to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-1775

Affected Products

Nextend Social Login/Register