Reflected XSS Vulnerability in KaizenCoders Short URL
CVE-2024-32138

7.1HIGH

Key Information:

Vendor
WordPress
Status
Short Url
Vendor
CVE Published:
15 April 2024

Summary

The vulnerability presents an improper neutralization of user input, allowing attackers to exploit reflected Cross-site Scripting (XSS) in the KaizenCoders Short URL plugin. This weakness permits the execution of malicious scripts within the context of users’ browsers, jeopardizing sensitive data and user sessions. Affected users are encouraged to update to secure versions and implement additional security measures for their web applications to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Short URL <= 1.6.8

References

https://patchstack.com/database/vulnerability/shorten-url...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dimas Maulana (Patchstack Alliance)
.