Medium severity · published Aug 26, 2020
CVE-2020-24314
Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag
6.1
CVSS
0.9%
EPSS
No
On KEV
Description
Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rss Feed Widget · Rss Feed Widget Project
through 2.7.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-24314
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-24314
Product
https://wordpress.org/plugins/rss-feed-widget/advanced/
Exploit
https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/
More from Rss Feed Widget
5.9
CVE-2024-9836
The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is…