Cross-Site Scripting in Popup Builder Plugin for WordPress
CVE-2020-10196

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Popup-builder
Vendor
CVE Published:
13 March 2020

Summary

The Popup Builder plugin for WordPress contains a vulnerability that allows remote attackers to perform Cross-Site Scripting (XSS) attacks. This is facilitated through an unsecured AJAX action in Ajax.php prior to version 3.64.1. By leveraging this flaw, unauthenticated attackers can inject arbitrary JavaScript into existing popups using the POST action parameter 'sgpb_autosave' along with manipulated data in the 'allPopupData' parameter which includes the popup's ID. This results in the execution of malicious scripts in the browsers of visitors viewing the affected popups, as the plugin automatically adds script tags to these fields, thereby potentially evading standard web application firewalls.

References

https://wpvulndb.com/vulnerabilities/10127
x_refsource_MISC
https://www.wordfence.com/blog/2020/03/vulnerabilities-pa...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.