CVE-2023-2272

MEDIUMNuclei

Tiempo.com <= 0.1.2 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-2272 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 8, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tiempo.com

Default status: affected

CVE ListThrough 0.1.2affected

Nuclei templates

1
ProjectDiscoveryMEDIUMTiempo.com <= 0.1.2 - Cross-Site ScriptingCVSS 6.1

Tiempo.com before 0.1.2 is susceptible to cross-site scripting via the page parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.

Remediation

Upgrade to a patched version of Tiempo.com (version 0.1.3 or above) that addresses the XSS vulnerability.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscvecve2023wpscanwpwp-pluginwordpressauthenticatedxsstiempocomtiempovuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:tiempo:tiempo:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/dba60216-2753-40b7-8f2b-6caeba684b2e https://wordpress.org/plugins/tiempocom/ https://nvd.nist.gov/vuln/detail/CVE-2023-2272

Source: ProjectDiscovery

References

2