Vulnerability · Published Jul 19, 2021 · Assigned by WPScan

CVE-2021-24436W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)

Medium 6.1

In plain English

A medium-severity cross-site scripting in W3 Total Cache from BoldGrid. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)1.8%top 21.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Nuclei

Official description

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.

Affected products (as reported)

Vendor	Product	Versions
BoldGrid	W3 Total Cache	2.1.4 – before 2.1.4

Weakness: CWE-79

References

https://wpscan.com/vulnerability/05988ebb-7378-4a3a-9d2d-30f8f58fe9ef x_refsource_CONFIRM