CVE-2012-20005: SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and malicious msg values to execute script and steal session cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker can exploit it remotely by sending a crafted GET request. Successful script execution requires a user to load the malicious request.
What request conditions are required for exploitation?
The vulnerable endpoint is /wp-content/plugins/socialfit/popup.php. The request must use service=googleplus and include a malicious value in the msg parameter.
What could an attacker do after successful exploitation?
Injected script can execute in the affected site's context and may be used to steal session cookies. The vulnerability affects confidentiality and integrity, with no stated availability impact.
Which plugin versions are affected?
SocialFit WordPress Plugin versions through 1.2.2 are affected. The provided data does not identify a fixed version.