CVE-2023-0099

MEDIUMNuclei

Simple URLs < 115 - Multiple Reflected XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-0099 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 6, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Simple URLs

Default status: unaffected

CVE ListBefore 115affected

Proofs of concept

1

Repository PoCs

GitHubamirzargham/CVE-2023-0099-exploitRepository PoCby amirzargham6Not analyzed2 files

3.4 KiB · linked to 2 vulnerabilities

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMSimple URLs < 115 - Cross Site ScriptingCVSS 6.1

The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Impact

Successful exploitation of this vulnerability can lead to session hijacking, defacement of websites, theft of sensitive information, and potential remote code execution.

Remediation

Fixed in version 115

WeaknessesCWE-79
Authorsr3Y3r53
Template tagswpscanpacketstormcvecve2023xsssimple-urlsauthenticatedwordpresswpwp-plugingetlassovuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:getlasso:simple_urls:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8 https://wordpress.org/plugins/simple-urls/ https://nvd.nist.gov/vuln/detail/CVE-2023-0099 http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3