CVE-2020-36731 PoC — WordPress Plugin Flexible Checkout Fields for WooCommerce 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36731.yaml

Associated Vulnerability

Title:WordPress Plugin Flexible Checkout Fields for WooCommerce 跨站脚本漏洞 (CVE-2020-36731)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin Flexible Checkout Fields for WooCommerce 存在安全漏洞，该漏洞源于缺少对通过 admin_init 挂钩调用的 updateSettingsAction() 函数的授权检查，以及缺少对存

Description

The Flexible Checkout Fields for WooCommerce  plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction() function which is called via an admin_init hook, along with missing sanitization and escaping on the settings that are stored.

File Snapshot


 id: CVE-2020-36731

info:
  name: Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticate

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!