CVE-2019-16931

MEDIUMNuclei

WordPress Visualizer <3.3.1 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2019-16931 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers wp-json/visualizer/v1/update-chart with no access control, and classes/Visualizer/Render/Page/Data.php lacks output sanitization.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Visualizer <3.3.1 - Cross-Site ScriptingCVSS 6.1

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.

Remediation

Update to the latest version of WordPress Visualizer plugin (3.3.1) or apply the provided patch to fix the XSS vulnerability.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2019wp-pluginwordpresswpxssunauthwpscanthemeislevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:themeisle:visualizer:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/867e000d-d2f5-4d53-89b0-41d7d4163f44 https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf https://wpvulndb.com/vulnerabilities/9893 https://nvd.nist.gov/vuln/detail/CVE-2019-16931 https://wordpress.org/plugins/visualizer/#developers

Source: ProjectDiscovery

References

5