CVE-2024-13221

MEDIUMNuclei

Fantastic Elasticsearch <= 4.1.0 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-13221 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 31, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Fantastic ElasticSearch

Default status: affected

CVE ListThrough 4.1.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMFantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site ScriptingCVSS 6.1

Fantastic ElasticSearch WordPress plugin <= 4.1.0 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to visit a malicious link.

Impact

Attackers can execute malicious scripts in the context of high privilege users, potentially leading to session hijacking or privilege escalation.

Remediation

Update to version 4.1.1 or later where input sanitization and escaping are properly implemented.

WeaknessesCWE-79
AuthorsSourabh-Sahu
Template tagscvecve2024fantastic-elasticsearchwordpresswpwp-pluginxssauthenticated
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:parisholley:fantastic_elasticsearch:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/693f4cc4-a082-46bc-abc9-a08919f70157/

Source: ProjectDiscovery

References

2