CVE-2022-2515: Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting

Q: Who can exploit this issue?

An attacker must be authenticated to WordPress and able to submit the pro_version_activation_code parameter. Users without administrative capabilities may be able to exploit it if they have been granted access to Simple Banner.

Q: Who is affected by the injected script?

The stored script executes when a user whose role has access to the Simple Banner settings opens those settings. The issue therefore depends on both the attacker having plugin access and a privileged user later viewing the affected settings page.

Q: Is a fix available?

Yes. A patch is available; versions up to and including 2.11.0 are affected, so update Simple Banner to a patched version.

Published Sep 6, 2022

Updated

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those without administrative capabilities when access is granted to those users, to inject arbitrary web scripts in page that will execute whenever a user role having access to "Simple Banner" accesses the plugin's settings.

Affected Software

2 affected components

Simple Banner Project Simple Banner Wordpress<=2.11.0

Simple Banner Project Simple Banner Wordpress<2.12.0

Remediation

Patch Available

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2758766%40simple-banner&new=2758766%40simple-banner&sfp_email=&sfph_mail=

Event History

Sep 6, 2022

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to WordPress and able to submit the pro_version_activation_code parameter. Users without administrative capabilities may be able to exploit it if they have been granted access to Simple Banner.

Who is affected by the injected script?

The stored script executes when a user whose role has access to the Simple Banner settings opens those settings. The issue therefore depends on both the attacker having plugin access and a privileged user later viewing the affected settings page.

Is a fix available?

Yes. A patch is available; versions up to and including 2.11.0 are affected, so update Simple Banner to a patched version.

CVE-2022-2515: Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Who can exploit this issue?

Who is affected by the injected script?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Who is affected by the injected script?

Is a fix available?