CVE-2016-1000149

MEDIUMNuclei

simpel-reserveren_project simpel-reserveren Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2016-1000149 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Reflected XSS in wordpress plugin simpel-reserveren v3.5.2

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Sep 19, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

simpel-reserveren

Browse simpel-reserveren_project / simpel-reserveren
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Simpel Reserveren <=3.5.2 - Cross-Site ScriptingCVSS 6.1

WordPress plugin Simpel Reserveren 3.5.2 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft or unauthorized actions.

Remediation

Upgrade to the latest version of the WordPress Simpel Reserveren plugin (>=3.5.3) or apply a patch provided by the vendor to fix the XSS vulnerability.

WeaknessesCWE-79
Authorsdaffainfo
Template tagscve2016cvewordpressxsswp-pluginsimpel-reserveren_projectvkevvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:simpel-reserveren_project:simpel-reserveren:*:*:*:*:*:wordpress:*:*
https://wordpress.org/plugins/simpel-reserveren http://www.vapidlabs.com/wp/wp_advisory.php?v=474 https://nvd.nist.gov/vuln/detail/CVE-2016-1000149 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

4