PT-2024-4809 · Microsoft · Azure Ad+1

Matthew Rollings + 1 · Published 2024-05-22 · Updated 2024-05-24 · CVE-2024-4706

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WordPress + Microsoft Office 365 / Azure AD | LOGIN plugin for WordPress versions up to, and including, 27.2

Description: The issue exists due to insufficient input sanitization and output escaping on user-supplied attributes in the plugin's pintra shortcode. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages, which will execute whenever a user accesses an injected page, facilitating a Stored Cross-Site Scripting (XSS) attack.

Recommendations: For versions up to, and including, 27.2, consider disabling the pintra shortcode until a patch is available to prevent exploitation. Restrict access to pages that use the pintra shortcode to minimize the risk of arbitrary web script injection. Avoid using the pintra shortcode in pages until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-05333

CVE-2024-4706

Affected Products

Azure Ad

Office 365

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-4706 · Security Note
• https://bdu.fstec.ru/vul/2024-05333 · Security Note
• https://t.me/cvenotify/80837 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3090428/wpo365-login · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/602a8030-087b-459f-b649-b4116404cf3e?source=cve · Note