CVE-2021-24979

MEDIUMNuclei

Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24979 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Paid Memberships Pro

CVE List2.6.6 to < 2.6.6affected

Nuclei templates

1
ProjectDiscoveryMEDIUMPaid Memberships Pro < 2.6.6 - Cross-Site ScriptingCVSS 6.1

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Impact

Attackers can inject malicious JavaScript via reflected XSS in the search parameter, potentially stealing administrator session cookies or accessing membership data.

Remediation

version 2.6.6

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2021cvewpwordpresswpscanwp-pluginxssauthenticatedstrangerstudiosvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/paid-memberships-pro/
FOFA: body=/wp-content/plugins/paid-memberships-pro/
Google: inurl:"/wp-content/plugins/paid-memberships-pro"
https://wpscan.com/vulnerability/fc011990-4ec1-4553-901d-4ff1f482cb79 https://nvd.nist.gov/vuln/detail/CVE-2021-24979 https://plugins.trac.wordpress.org/changeset/2632369/paid-memberships-pro/tags/2.6.6/adminpages/discountcodes.php

Source: ProjectDiscovery

References

3