CVE-2024-4036: Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/sydney-toolboxto a version that resolves this vulnerability.Fixed in 1.30 - Configuration
Update the Sydney Toolbox plugin so that the style parameter is properly sanitized and escaped; the issue exists in all versions up to and including 1.30 due to insufficient input sanitization/output escaping.
WordPress (Sydney Toolbox plugin) style parameter output handling (input sanitization/output escaping) = Sanitize and escape the style parameter before saving and before rendering to prevent Stored XSS
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4036?
CVE-2024-4036 has a moderate severity rating as it allows authenticated attackers to execute stored cross-site scripting.
How do I fix CVE-2024-4036?
To fix CVE-2024-4036, upgrade the Sydney Toolbox plugin to version 1.31 or later.
Who is affected by CVE-2024-4036?
CVE-2024-4036 affects all versions of the Sydney Toolbox plugin for WordPress up to and including version 1.30.
What type of attack is associated with CVE-2024-4036?
CVE-2024-4036 is associated with stored cross-site scripting attacks due to insufficient input sanitization.
What must an attacker have to exploit CVE-2024-4036?
An attacker must have contributor access or higher to exploit CVE-2024-4036.