Ubuntu.comUB:CVE-2024-4439CVE-2024-4439
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
6.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%
WordPress Core is vulnerable to Stored Cross-Site Scripting via user
display names in the Avatar block in various versions up to 6.5.2 due to
insufficient output escaping on the display name. This makes it possible
for authenticated attackers, with contributor-level access and above, to
inject arbitrary web scripts in pages that will execute whenever a user
accesses an injected page. In addition, it also makes it possible for
unauthenticated attackers to inject arbitrary web scripts in pages that
have the comment block present and display the comment author’s avatar.
Bugs
References
core.trac.wordpress.org/changeset/57951/branches/6.4/src/wp-includes/blocks/avatar.php
core.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=57950%40%2F&new=57950%40%2F&sfp_email=&sfph_mail=#file3
launchpad.net/bugs/cve/CVE-2024-4439
nvd.nist.gov/vuln/detail/CVE-2024-4439
security-tracker.debian.org/tracker/CVE-2024-4439
wordpress.org/news/2024/04/wordpress-6-5-2-maintenance-and-security-release/
wpscan.com/blog/unauthenticated-stored-xss-fixed-in-wordpress-core/
www.cve.org/CVERecord?id=CVE-2024-4439
www.wordfence.com/blog/2024/04/unauthenticated-stored-cross-site-scripting-vulnerability-patched-in-wordpress-core/
www.wordfence.com/threat-intel/vulnerabilities/id/e363c09a-4381-4b3a-951c-9a0ff5669016?source=cve
Related
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
6.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%