Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID
CVE-2021-24330

4.8MEDIUM

Key Information:

Vendor

Wordpress
Status
Funnel Builder By Cartflows – Create High Converting Sales Funnels For WordPress
Vendor
CVE Published:
1 June 2021

What is CVE-2021-24330?

The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privilege users to set XSS payload in them, which will either be executed on pages generated by the plugin, or the whole website depending on the settings used.

Affected Version(s)

Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress 1.6.13

References

https://wpscan.com/vulnerability/b9748066-83b7-4762-9124-...
x_refsource_CONFIRM
https://m0ze.ru/vulnerability/%5B2021-04-26%5D-%5BWordPre...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

m0ze
.