Vulnerability · Published Jul 19, 2021 · Assigned by WPScan
CVE-2021-24452W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)
Medium 6.1
In plain English
A medium-severity cross-site scripting in W3 Total Cache from BoldGrid. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BoldGrid | W3 Total Cache | 2.1.5 – before 2.1.5 |
Weakness: CWE-79
References
- https://wpscan.com/vulnerability/3e855e09-056f-45b5-89a9-d644b7d8c9d0 x_refsource_CONFIRM