CVE-2015-5461

Nuclei

WordPress StageShow <5.0.9 - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2015-5461 has a selected CVSS score of 6.4; EIP currently links 1 Nuclei template.

Description

Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress StageShow <5.0.9 - Open RedirectCVSS 6.4

WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshow_redirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter.

Impact

An attacker can trick users into visiting a malicious website, leading to potential phishing attacks.

Remediation

Update to the latest version of the WordPress StageShow plugin (5.0.9 or higher) to fix the open redirect vulnerability.

Authors0x_Akoko
Template tagscve2015cvewpscanseclistsredirectwordpresswp-pluginstageshow_projectvuln
CVSS vector: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
CPE: cpe:2.3:a:stageshow_project:stageshow:*:*:*:*:*:wordpress:*:*
Google: inurl:"/wp-content/plugins/stageshow/"
https://wpscan.com/vulnerability/afc0d5b5-280f-424f-bc3e-d04452e56e16 https://wordpress.org/plugins/stageshow/changelog/ http://seclists.org/fulldisclosure/2015/Jul/27 https://nvd.nist.gov/vuln/detail/CVE-2015-5461 https://plugins.trac.wordpress.org/changeset/1165310/

Source: ProjectDiscovery

References

7