CVE-2023-4148

MEDIUMNuclei

Ditty < 3.1.25 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-4148 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ditty

Default status: unaffected

CVE ListBefore 3.1.25affected

Nuclei templates

1
ProjectDiscoveryMEDIUMDitty < 3.1.25 - Cross-Site ScriptingCVSS 6.1

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Impact

Unauthenticated attackers can inject malicious JavaScript through unsanitized parameters and generated URLs to steal session cookies from high-privilege users including WordPress administrators.

Remediation

Fixed in version 3.1.25

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2023cveditty-news-tickerwordpresswp-pluginwpscanwpauthenticatedmetaphorcreationsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:metaphorcreations:ditty:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/ditty-news-ticker/
FOFA: body=/wp-content/plugins/ditty-news-ticker/
https://wpscan.com/vulnerability/aa39de78-55b3-4237-84db-6fdf6820c58d https://nvd.nist.gov/vuln/detail/CVE-2023-4148

Source: ProjectDiscovery

References

2