CVE-2022-0765

MEDIUMNuclei

Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-0765 has a selected CVSS score of 5.4 (medium); EIP currently links 1 Nuclei template.

Description

The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin (Translator and Administrator by default) to add arbitrary javascript payloads to the source strings leading to a stored cross-site scripting (XSS) vulnerability.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Loco Translate

CVE List2.6.1 to < 2.6.1affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Loco Translate < 2.6.1 - Cross-Site ScriptingCVSS 5.4

Loco Translate WordPress plugin before 2.6.1 contains a stored cross-site scripting vulnerability caused by improper removal of inline events from source translation strings, allowing authenticated users to inject arbitrary JavaScript payloads.

Impact

Attackers can execute arbitrary JavaScript in the context of the admin panel, potentially leading to session hijacking or defacement.

Remediation

Update to version 2.6.1 or later.

WeaknessesCWE-79
Authors0x_Akoko
Template tagscvecve2022wordpresswpwp-pluginxssloco-translateauthenticated
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:loco_translate_project:loco_translate:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/58838f51-323d-41e0-8c85-8e113dc2c587 https://patchstack.com/database/vulnerability/loco-translate/wordpress-loco-translate-plugin-2-6-0-authenticated-stored-cross-site-scripting-xss-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-0765

Source: ProjectDiscovery

References

2