CVE-2015-8350

MEDIUMNuclei

WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2015-8350 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/edit.php or (2) wp-cta-variation-id parameter to ab-testing-call-to-action-example/.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Calls to Action <=2.4.3 - Authenticated Reflected XSSCVSS 6.1

Calls to Action plugin before 2.5.1 for WordPress contains stored XSS caused by unsanitized input in open-tab parameter in wp-admin/edit.php and wp-cta-variation-id parameter in ab-testing-call-to-action-example/, letting remote attackers inject arbitrary web script or HTML, exploit requires sending crafted requests.

Impact

Attackers can execute arbitrary scripts in the context of the affected website, leading to session hijacking, defacement, or redirection.

Remediation

Update to version 2.5.1 or later to fix the vulnerabilities.

WeaknessesCWE-79
Authors0x_Akoko
Template tagsseclistscvecve2015wordpresswp-pluginxssreflectedauthenticated
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:inboundnow:call_to_action:*:*:*:*:*:wordpress:*:*
https://www.immuniweb.com/advisory/HTB23274 https://seclists.org/bugtraq/2015/Dec/9 https://nvd.nist.gov/vuln/detail/CVE-2015-8350 https://plugins.trac.wordpress.org/changeset/1274208/cta http://packetstormsecurity.com/files/134598/WordPress-Calls-To-Action-2.4.3-Cross-Site-Scripting.html

Source: ProjectDiscovery

References

5