CVE-2023-6970

MEDIUMNuclei

WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-6970 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The WP Recipe Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘Referer' header in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 18, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

WP Recipe Maker

Browse brechtvds / WP Recipe Maker

Default status: unaffected

CVE ListThrough 9.1.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWP Recipe Maker <= 9.1.0 - Reflected XSS via Referer Header

The WP Recipe Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. The Referer header value is used directly in the href attribute of the "Back" button on the print page without proper escaping.

Impact

Attackers can execute arbitrary scripts in the context of the victim's browser, potentially leading to session hijacking or defacement.

Remediation

Update to the latest version of WP Recipe Maker plugin.

AuthorsShivam Kamboj
Template tagscvecve2023wordpresswp-pluginxsswp-recipe-makerwp
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-recipe-maker/wp-recipe-maker-910-reflected-cross-site-scripting-via-referer https://nvd.nist.gov/vuln/detail/CVE-2023-6970 https://plugins.trac.wordpress.org/changeset/3019769/wp-recipe-maker/trunk/templates/public/print.php

Source: ProjectDiscovery

References

3