Stored Cross-Site Scripting Vulnerability in Custom Permalinks Plugin for WordPress
CVE-2023-0926

5.4MEDIUM

Key Information:

Vendor
Sasiddiqui
Status
Custom Permalinks
Vendor
CVE Published:
24 August 2024

Summary

The Custom Permalinks plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability found in versions up to and including 2.6.0. This security flaw emanates from inadequate input sanitization and output escaping on tag names, enabling authenticated users with editor-level permissions or higher to embed arbitrary web scripts into pages. These malicious scripts are then executed when a user accesses the compromised page, even if 'unfiltered_html' is disabled, posing a significant risk to site integrity and user safety.

Affected Version(s)

Custom Permalinks * <= 2.6.0

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://wordpress.org/plugins/custom-permalinks/
https://github.com/samiahmedsiddiqui/custom-permalinks/pu...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ramuel Gall
.