CVE-2024-6517

MEDIUMNuclei

Contact Form 7 Math Captcha <= 2.0.1 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-6517 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 26, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Contact Form 7 Math Captcha

Default status: affected

CVE ListThrough 2.0.1affected

contact_form_7_math_captcha

Browse contact_form_7_captcha_project / contact_form_7_math_captcha

Default status: unknown

CVE ListThrough 2.0.1affected

Nuclei templates

1
ProjectDiscoveryMEDIUMContact Form 7 Math Captcha <= 2.0.1 - Cross-site ScriptingCVSS 6.1

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users.

Impact

Attackers can inject malicious JavaScript through the tagname parameter to execute arbitrary code in the context of high-privilege users who interact with crafted links.

Remediation

Update Contact Form 7 Math Captcha plugin to version 2.0.2 or later to address the reflected XSS vulnerability.

WeaknessesCWE-79
Authorss4e-io
Template tagscvecve2024wpwordpresswp-pluginxssds-cf7-math-captchavuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:dotsquares:contact_form_7_math_captcha:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/d04bab9c-7cb4-4d21-b70b-a4a7fabc3c20/ https://nvd.nist.gov/vuln/detail/CVE-2024-6517

Source: ProjectDiscovery

References

2