CVE-2023-2518

MEDIUMNuclei

Easy Forms for Mailchimp < 6.8.9 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-2518 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 10, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Easy Forms for Mailchimp

Default status: unaffected

CVE ListBefore 6.8.9affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site ScriptingCVSS 6.1

The Easy Forms for Mailchimp plugin before version 6.8.9 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the sql_error parameter before outputting it back in the page when the debug option is enabled, which could allow attackers to execute arbitrary JavaScript code in an administrator's browser context.

Impact

Attackers can inject malicious JavaScript through the sql_error parameter when debug mode is enabled, potentially stealing administrator session cookies and gaining full control over the WordPress site.

Remediation

Update Easy Forms for Mailchimp plugin to version 6.8.9 or later that properly sanitizes and escapes the sql_error parameter before output.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2023wpwordpresswp-pluginxssyikes-inc-easy-mailchimp-extenderauthenticatedvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:yikesinc:easy_forms_for_mailchimp:*:*:*:*:*:wordpress:*:*
FOFA: body="wp-content/plugins/yikes-inc-easy-mailchimp-extender/"
https://wpscan.com/vulnerability/ca120255-2c50-4906-97f3-ea660486db4c https://nvd.nist.gov/vuln/detail/CVE-2023-2518

Source: ProjectDiscovery

References

2