CVE-2023-3410
published 2024-09-14CVE-2023-3410: The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to…
PriorityP424medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.30%
21.5th percentile
The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder (admin-only by default), to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This becomes more of an issue when Bricks Builder access is granted to lower-privileged users.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bricks_builder | bricks | <= 1.10.1 | — |
| bricksbuilder | bricks | < 1.10.2 | 1.10.2 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
ghsa5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Insecure Temporary File in RESTEasy
ghsa·2025-01-15·CVSS 5.5
CVE-2023-0482 [MEDIUM] CWE-378 Insecure Temporary File in RESTEasy
Insecure Temporary File in RESTEasy
### Impact
In RESTEasy the insecure `File.createTempFile()` is used in the `DataSourceProvider`, `FileProvider` and `Mime4JWorkaround` classes which creates temp files with insecure permissions that could be read by a local user.
### Patches
Fixed in the following pull requests:
* https://github.com/resteasy/resteasy/pull/3409 (7.0.0.Alpha1)
* https://github.com/resteasy/resteasy/pull/3423 (6.2.3.Final)
* https://github.com/resteasy/resteasy/pull/3412 (5.0.6.Final)
* https://github.com/resteasy/resteasy/pull/3413 (4.7.8.Final)
* https://github.com/resteasy/resteasy/pull/3410 (3.15.5.Final)
### Workarounds
There is no workaround for this issue.
### References
* https://nvd.nist.gov/vuln/detail/CVE-2023-0482
* https://bugzilla.redhat.com/show_bug.cgi?
GHSA
GHSA-cqpv-2227-9mjj: The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1
ghsa_unreviewed·2024-09-16
CVE-2023-3410 [MEDIUM] CWE-79 GHSA-cqpv-2227-9mjj: The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1
The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder (admin-only by default), to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This becomes more of an issue when Bricks Builder access is granted to lower-privileged users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-14
Published