CVE-2023-0099
Published: 13 February 2023
Summary
CVE-2023-0099 is a medium-severity an unspecified weakness vulnerability in Getlasso Simple Urls. Its CVSS base score is 6.1 (Medium).
Operationally, ranked in the top 1.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The Simple URLs WordPress plugin before version 115 is affected by a reflected cross-site scripting vulnerability. The root cause is missing sanitization and escaping of certain parameters that are later reflected in plugin-generated pages, allowing attacker-controlled script to execute in the context of the victim's browser. The issue carries a CVSS 3.1 score of 6.1 with a network attack vector, low complexity, and required user interaction.
An unauthenticated attacker can craft a malicious link containing the unsanitized parameters and deliver it to a high-privilege user such as an administrator. When the victim follows the link, the injected script runs with the victim's privileges, enabling actions such as account takeover, plugin or theme modification, or further lateral movement within the WordPress installation.
Public references on WPScan and PacketStorm confirm the reflected XSS vector and note that the flaw is resolved in version 115. The associated EPSS score has reached a peak of 0.7311 with a current value of 0.7005, indicating sustained exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-12198
Vulnerability details
The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.