PT-2024-37634 · WordPress · Full – Cliente

Matthew Rollings + 1 · Published 2024-07-10 · Updated 2024-07-11 · CVE-2024-6447

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The FULL – Cliente plugin for WordPress versions up to, and including, 3.1.12

Description The issue is related to Stored Cross-Site Scripting via the license plan parameter due to insufficient input sanitization and output escaping, as well as missing authorization and capability checks on the related functions. This allows unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrative user accesses the wp-admin dashboard.

Recommendations For versions up to, and including, 3.1.12, update to a version that addresses the insufficient input sanitization and output escaping, and ensures proper authorization and capability checks on the related functions. As a temporary workaround, consider restricting access to the license plan parameter to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-6447

Affected Products

Full – Cliente

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-6447 · Security Note
• https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.12/app/controller/inc/License.php#L55 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/2f3ad1e0-1ae3-44cd-aa2a-dbb3a1b531f9?source=cve · Note
• https://t.me/cvenotify/85738 · Telegram Post
• https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.12/app/api/Connection.php#L43 · Note
• https://twitter.com/CVEnew/status/1811322670870577525 · Twitter Post
• https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.12/app/controller/actions.php#L125 · Note
• https://t.me/cvedetector/620 · Telegram Post