CVE-2022-1756

MEDIUMNuclei

Newsletter < 7.4.5 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-1756 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Newsletter – Send awesome emails from WordPress

CVE List7.4.5 to < 7.4.5affected

Nuclei templates

1
ProjectDiscoveryMEDIUMNewsletter < 7.4.5 - Cross-Site ScriptingCVSS 6.1

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.

Impact

Allows attackers to inject malicious scripts into web pages viewed by users, leading to potential data theft or unauthorized actions.

Remediation

Fixed in version 7.4.5

WeaknessesCWE-79
AuthorsHarsh
Template tagscvecve2022wpscannewsletterxssauthenticatedthenewsletterpluginwordpressvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:thenewsletterplugin:newsletter:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/newsletter/
FOFA: body=/wp-content/plugins/newsletter/
https://wpscan.com/vulnerability/6ad407fe-db2b-41fb-834b-dd8c4f62b072 https://nvd.nist.gov/vuln/detail/CVE-2022-1756 https://wordpress.org/plugins/newsletter/ https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2