Description

WordPress Plugin WPML (WordPress Multilingual) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. WordPress Plugin WPML (WordPress Multilingual) version 3.6.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.0 or latest

References

https://0x62626262.wordpress.com/2018/10/08/sitepress-multilingual-cms-plugin-unauthenticated-stored-xss/

https://seclists.org/bugtraq/2018/Oct/24

Related Vulnerabilities

IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4699)

WordPress Plugin Uploadify Integration Multiple Cross-Site Scripting Vulnerabilities (0.9.6)

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2489)

WordPress Plugin VM Backups Cross-Site Request Forgery (1.0)

WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)

Severity

High

Classification

CVE-2018-18069 CWE-79 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update XSS