CVE-2024-3469

MEDIUMNuclei

GP Premium <= 2.4.0 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-3469 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 5, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 5, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

GP Premium

Browse GeneratePress / GP Premium

Default status: unaffected

CVE ListThrough 2.4.0affected

generatepress

Browse generatepress / generatepress
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryMEDIUMGP Premium <= 2.4.0 - Cross-Site ScriptingCVSS 6.1

The GP Premium plugin for WordPress up to 2.4.0 is vulnerable to reflected XSS via the 'message' parameter in inc/verify.php (lines 95-101), where a message passed with sl_activation=false is URL-decoded and used unsanitized in add_settings_error(), allowing XSS payloads to be reflected in admin notices.

Impact

Successful exploitation allows attackers to hijack administrator sessions via cookie theft, create rogue administrative accounts, perform actions on behalf of authenticated users, and deface the website or inject malicious content.

Remediation

Update GP Premium to version 2.4.1 or later.

WeaknessesCWE-79
AuthorsShivam Kamboj
Template tagscvecve2024wordpresswp-plugingp-premiumxssauthenticatedwpvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
FOFA: body="/wp-content/plugins/gp-premium/"
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/gp-premium/gp-premium-240-reflected-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2024-3469

Source: ProjectDiscovery

References

3