CVE-2024-7313

MEDIUMNuclei

Shield Security < 20.0.6 - Reflected XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-7313 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 26, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Shield Security

Default status: unaffected

CVE ListBefore 20.0.6affected

shield_security

Browse getshieldsecurity / shield_security

Default status: unknown

CVE ListBefore 20.0.6affected

Proofs of concept

1

Repository PoCs

GitHubWayne-Ker/CVE-2024-7313Repository PoCby Wayne-Ker3Not analyzed2 files

14.1 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMShield Security Plugin < 20.0.6 - Cross-Site ScriptingCVSS 6.1

The Shield Security WordPress plugin before 20.0.6 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'nav_sub' parameter in the admin dashboard, allowing authenticated users to execute arbitrary JavaScript in the context of other authenticated administrators.

Impact

Authenticated users can inject malicious JavaScript through the nav_sub parameter that executes in the context of other administrators' sessions, potentially leading to privilege escalation, data theft, or unauthorized administrative actions.

Remediation

Update the Shield Security plugin to version 20.0.6 or later.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2024wpwordpressxsswp-pluginauthenticatedwp-simple-firewallvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shodan: wp-content/plugins/wp-simple-firewall/
FOFA: body="wp-content/plugins/wp-simple-firewall/"
Google: inurl:"/wp-content/plugins/wp-simple-firewall/"
https://wpscan.com/vulnerability/83a1bdc6-098e-43d5-89e5-f4202ecd78a1/ https://research.cleantalk.org/CVE-2024-7313/ https://nvd.nist.gov/vuln/detail/CVE-2024-7313

Source: ProjectDiscovery

References

2