CVE-2021-38344: Brizy <= 2.3.11 Authenticated Stored Cross-Site Scripting
The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add malicious JavaScript to a page by modifying the request sent to update the page via the brizyupdateitem AJAX action and adding JavaScript to the data parameter, which would be executed in the session of any visitor viewing or previewing the post or page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
brizy/Brizy Page Builder plugin for WordPressto a version that resolves this vulnerability.Fixed in 2.3.11 - Compensating control
Mitigate the risk of stored XSS by restricting which WordPress roles/users are able to update or modify Brizy pages/posts (e.g., limit the ability to use the brizy_update_item AJAX action to trusted, higher-privileged roles).
Event History
Frequently Asked Questions
What is the vulnerability ID of this Brizy Page Builder plugin vulnerability?
The vulnerability ID is CVE-2021-38344.
What is the severity of CVE-2021-38344 vulnerability?
The severity of CVE-2021-38344 vulnerability is medium with a CVSS score of 5.4.
How does the CVE-2021-38344 vulnerability in Brizy Page Builder plugin affect WordPress?
The CVE-2021-38344 vulnerability in Brizy Page Builder plugin for WordPress allows lower-privileged users, such as subscribers, to execute stored Cross-Site Scripting (XSS) attacks.
How can a attacker exploit CVE-2021-38344 vulnerability?
An attacker can exploit the CVE-2021-38344 vulnerability by modifying the request sent to update a page via the brizy_update_item AJAX action and injecting malicious JavaScript code, which can be executed when the page is accessed by users.
How can I fix the CVE-2021-38344 vulnerability in Brizy Page Builder plugin?
To fix the CVE-2021-38344 vulnerability, upgrade the Brizy Page Builder plugin to version 2.3.12 or later, which contains the necessary security fixes.