CVE-2023-1780

MEDIUMNuclei

Companion Sitemap Generator < 4.5.3 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-1780 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 8, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Companion Sitemap Generator

Default status: unaffected

CVE ListBefore 4.5.3affected

Nuclei templates

1
ProjectDiscoveryMEDIUMCompanion Sitemap Generator < 4.5.3 - Cross-Site ScriptingCVSS 6.1

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Impact

Unauthenticated attackers can inject malicious JavaScript through the tabbed parameter in sitemap generator pages to steal session cookies from high-privilege users including WordPress administrators.

Remediation

Fixed in version 4.5.3

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscvecve2023wpscanwpwordpresswp-scanxssauthenticatedcodeermeneervuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:codeermeneer:companion_sitemap_generator:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/companion-sitemap-generator/
FOFA: body=/wp-content/plugins/companion-sitemap-generator/
https://wpscan.com/vulnerability/8176308f-f210-4109-9c88-9372415dbed3 https://nvd.nist.gov/vuln/detail/CVE-2023-1780

Source: ProjectDiscovery

References

2