CVE-2021-24878

MEDIUMNuclei

SupportCandy < 2.2.7 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24878 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 5, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

SupportCandy – Helpdesk & Support Ticket System

CVE List2.2.7 to < 2.2.7affected

supportcandy

Browse supportcandy / supportcandy
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryMEDIUMSupportCandy < 2.2.7 - Reflected Cross-Site ScriptingCVSS 6.1

The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue

Impact

Attackers can inject malicious JavaScript via reflected XSS in pages with wpsc_create_ticket shortcode, potentially stealing user session cookies or manipulating support ticket data.

Remediation

Fixed in 2.2.7

WeaknessesCWE-79
Authorspopcorn94
Template tagscvecve2021wordpresswpscanwp-pluginsupportcandyxssvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:supportcandy:supportcandy:*:*:*:*:*:wordpress:*:*
FOFA: body="/wp-content/plugins/supportcandy/"
https://nvd.nist.gov/vuln/detail/CVE-2021-24878 https://github.com/andrewcy86/supportcandy(plugin) https://wpscan.com/vulnerability/d2f1fd60-5e5e-4e38-9559-ba2d14ae37bf/

Source: ProjectDiscovery

References

2