PT-2024-38248 · WordPress · Wordpress File Upload

Wesley · Published 2024-08-15 · Updated 2024-08-19 · CVE-2024-7301

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WordPress File Upload plugin versions up to and including 4.24.8

Description The issue concerns a Stored Cross-Site Scripting vulnerability via SVG file uploads, affecting the WordPress File Upload plugin. This vulnerability is due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute whenever a user accesses the uploaded SVG file.

Recommendations For WordPress File Upload plugin versions up to and including 4.24.8, update to a version higher than 4.24.8 to resolve the issue. As a temporary workaround, consider restricting access to SVG file uploads until a patch is applied. Additionally, avoid using the plugin's file upload functionality for SVG files until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-7301

Affected Products

Wordpress File Upload

References · 12

• https://osv.dev/vulnerability/CVE-2024-7301 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/3136025 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-7301 · Security Note
• https://wordpress.org/plugins/wp-file-upload/#developers · Note
• https://plugins.trac.wordpress.org/browser/wp-file-upload/tags/4.24.8/lib/wfu_io.php#L176 · Note
• https://t.me/cvenotify/90870 · Telegram Post
• https://twitter.com/Infosec_techs/status/1824374981863547069 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1824513336685268997 · Twitter Post
• https://t.me/cvedetector/3323 · Telegram Post
• https://twitter.com/CVEnew/status/1824304899368030392 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/e2b16b9c-48c7-4370-839b-696797ff2101?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-file-upload/tags/4.24.8/lib/wfu_security.php#L50 · Note