cnvd - cnvd-2022-86551

cnvd-2022-86551

Vulnerability from cnvd

Title: WordPress wpDiscuz plugin跨站脚本漏洞

Description:

WordPress插件是WordPress的一个应用插件。

WordPress wpDiscuz plugin 7.3.0及之前版本存在跨站脚本漏洞，该漏洞源于插件在将Follow和Unfollow消息输出到页面之前，未能正确清理或转义这些消息。攻击者可利用该漏洞在客户端执行JavaScript代码。

Severity: 低

Patch Name: WordPress wpDiscuz plugin跨站脚本漏洞的补丁

Patch Description:

WordPress插件是WordPress的一个应用插件。

WordPress wpDiscuz plugin 7.3.0及之前版本存在跨站脚本漏洞，该漏洞源于插件在将Follow和Unfollow消息输出到页面之前，未能正确清理或转义这些消息。攻击者可利用该漏洞在客户端执行JavaScript代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-24737

Impacted products

Name
WordPress wpDiscuz Plugin <=7.3.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-24737",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-24737"
    }
  },
  "description": "WordPress\u63d2\u4ef6\u662fWordPress\u7684\u4e00\u4e2a\u5e94\u7528\u63d2\u4ef6\u3002\n\nWordPress wpDiscuz plugin 7.3.0\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d2\u4ef6\u5728\u5c06Follow\u548cUnfollow\u6d88\u606f\u8f93\u51fa\u5230\u9875\u9762\u4e4b\u524d\uff0c\u672a\u80fd\u6b63\u786e\u6e05\u7406\u6216\u8f6c\u4e49\u8fd9\u4e9b\u6d88\u606f\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5ba2\u6237\u7aef\u6267\u884cJavaScript\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-86551",
  "openTime": "2022-12-12",
  "patchDescription": "WordPress\u63d2\u4ef6\u662fWordPress\u7684\u4e00\u4e2a\u5e94\u7528\u63d2\u4ef6\u3002\r\n\r\nWordPress wpDiscuz plugin 7.3.0\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d2\u4ef6\u5728\u5c06Follow\u548cUnfollow\u6d88\u606f\u8f93\u51fa\u5230\u9875\u9762\u4e4b\u524d\uff0c\u672a\u80fd\u6b63\u786e\u6e05\u7406\u6216\u8f6c\u4e49\u8fd9\u4e9b\u6d88\u606f\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5ba2\u6237\u7aef\u6267\u884cJavaScript\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "WordPress wpDiscuz plugin\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "WordPress wpDiscuz Plugin \u003c=7.3.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-24737",
  "serverity": "\u4f4e",
  "submitTime": "2021-10-13",
  "title": "WordPress wpDiscuz plugin\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

CVE-2021-24737 (GCVE-0-2021-24737)

Vulnerability from cvelistv5

Published

2021-10-11 10:45

Modified

2024-08-03 19:42

Severity ?

CWE

CWE-79 - Cross-site Scripting (XSS)

Summary

The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

References

▼	URL	Tags
	https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Unknown	Comments – wpDiscuz	Version: 7.3.0 <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T19:42:16.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Comments \u2013 wpDiscuz",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "7.3.0",
              "status": "affected",
              "version": "7.3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Phu Tran from techlabcorp.com"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Comments \u2013 wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Cross-site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-11T10:45:51",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Comments - wpDiscuz \u003c= 7.3.0 - Admin+ Stored Cross-Site Scripting",
      "x_generator": "WPScan CVE Generator",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "contact@wpscan.com",
          "ID": "CVE-2021-24737",
          "STATE": "PUBLIC",
          "TITLE": "Comments - wpDiscuz \u003c= 7.3.0 - Admin+ Stored Cross-Site Scripting"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Comments \u2013 wpDiscuz",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "7.3.0",
                            "version_value": "7.3.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Unknown"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Phu Tran from techlabcorp.com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Comments \u2013 wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed."
            }
          ]
        },
        "generator": "WPScan CVE Generator",
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-79 Cross-site Scripting (XSS)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b",
              "refsource": "MISC",
              "url": "https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2021-24737",
    "datePublished": "2021-10-11T10:45:51",
    "dateReserved": "2021-01-14T00:00:00",
    "dateUpdated": "2024-08-03T19:42:16.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted