CVE-2023-0968

MEDIUMNuclei

Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-0968 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 13, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Watu Quiz

Browse prasunsen / Watu Quiz

Default status: unaffected

CVE ListThrough 3.3.9affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Watu Quiz <3.3.9.1 - Cross-Site ScriptingCVSS 6.1

WordPress Watu Quiz plugin before 3.3.9.1 is susceptible to cross-site scripting. The plugin does not sanitize and escape some parameters, such as email, dn, date, and points, before outputting then back in a page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. This exploit can be used against high-privilege users such as admin.

Impact

Successful exploitation of this vulnerability could lead to cross-site scripting (XSS) attacks, allowing an attacker to execute malicious scripts on the victim's browser.

Remediation

Fixed in version 3.3.9.1.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2023cvewordpresswpwp-pluginxsswatuauthenticatedwpscankibokolabsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:kibokolabs:watu_quiz:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/29008d1a-62b3-4f40-b5a3-134455b01595 https://wordpress.org/plugins/watu/ https://plugins.trac.wordpress.org/browser/watu/trunk/views/takings.php#L31 https://nvd.nist.gov/vuln/detail/CVE-2023-0968 https://www.wordfence.com/threat-intel/vulnerabilities/id/6341bdcc-c99f-40c3-81c4-ad90ff19f802

Source: ProjectDiscovery

References

5