CVE-2022-0385
Published: 28 February 2022
Summary
CVE-2022-0385 is a medium-severity Cross-site Scripting (CWE-79) vulnerability in Crazy Bone Project Crazy Bone. Its CVSS base score is 6.1 (Medium).
Operationally, ranked in the top 9.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The Crazy Bone WordPress plugin through version 0.6.0 contains a stored cross-site scripting vulnerability (CWE-79) because it neither sanitizes nor escapes usernames submitted through the login form before rendering them in the plugin's log dashboard. The flaw is tracked as CVE-2022-0385 and carries a CVSS 3.1 score of 6.1.
An unauthenticated attacker can supply a crafted username during any login attempt; the payload is stored server-side and executes in the browser of any administrator who later views the dashboard logs, enabling theft of cookies or session tokens and other actions within the administrator's context.
The EPSS score for this issue has remained flat at 0.06 with no material increase since disclosure. WPScan has published a vulnerability entry containing further technical details at the referenced URL.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-15534
Vulnerability details
The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing submits XSS payloads to web applications, detecting cross-site scripting flaws for subsequent remediation.
Validates web inputs to reject script-related content that could produce XSS.
Output validation against expected content can reject or sanitize script content in generated web pages, reducing XSS exploitability.