9.6

CVE-2021-24814

Exploit

WordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting

WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting

The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web browser led to this endpoint. Javascript code may be executed on a victim's browser. If the victim is an administrator with a valid session cookie, full control of the WordPress instance may be taken (AJAX calls and iframe manipulation are possible because the vulnerable endpoint is on the same domain as the admin panel - there is no same-origin restriction).
Mögliche Gegenmaßnahme
WordPress GDPR: Update to version 1.9.27, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Welaunch ≫ Wordpress Gdpr&ccpa SwPlatformwordpress Version <= 1.9.26
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt WordPress GDPR
Version *-1.9.26
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.09% 0.791
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.6 2.8 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://wpscan.com/vulnerability/94ab34f6-86a9-4e14-bf86-26ff6cb4383e
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/fe023bc0-11b9-4520-874a-4656f633d4ac
Third Party Advisory